CVE-2012-2819: Google Chrome

Medium severity, CVSS 6.8. EPSS: 1% chance of exploitation in the next 30 days.

The texSubImage2D implementation in the WebGL subsystem in Google Chrome before 20.0.1132.43 does not properly handle uploads to floating-point textures, which allows remote attackers to cause a denial of service (assertion failure and application crash) or possibly have unspecified other impact via a crafted web page, as demonstrated by certain WebGL performance tests, aka rdar problem 11520387.

Affected products

• Google Chrome: up to and including 20.0.1132.42; version 20.0.1132.0 only; version 20.0.1132.1 only; version 20.0.1132.2 only; version 20.0.1132.3 only; version 20.0.1132.4 only; …

Published 2012-06-27. Last modified 2026-06-16.