CVE-2010-4574: Google Chrome

High severity, CVSS 7.5. EPSS: 1.8% chance of exploitation in the next 30 days.

The Pickle::Pickle function in base/pickle.cc in Google Chrome before 8.0.552.224 and Chrome OS before 8.0.552.343 on 64-bit Linux platforms does not properly perform pointer arithmetic, which allows remote attackers to bypass message deserialization validation, and cause a denial of service or possibly have unspecified other impact, via invalid pickle data.

Affected products

• Google Chrome: before 8.0.552.224 (fixed in 8.0.552.224)
• Google Chrome OS: before 8.0.552.343 (fixed in 8.0.552.343)

Published 2010-12-22. Last modified 2026-06-16.