CVE-2010-4489: Google Chrome

Medium severity, CVSS 4.3. EPSS: 1% chance of exploitation in the next 30 days.

libvpx, as used in Google Chrome before 8.0.552.215 and possibly other products, allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted WebM video. NOTE: this vulnerability exists because of a regression.

Affected products

• Google Chrome: up to and including 8.0.552.214

Published 2010-12-07. Last modified 2026-06-16.