CVE-2014-1717: Google Chrome

High severity, CVSS 7.5. EPSS: 1.3% chance of exploitation in the next 30 days.

Google V8, as used in Google Chrome before 34.0.1847.116, does not properly use numeric casts during handling of typed arrays, which allows remote attackers to cause a denial of service (out-of-bounds array access) or possibly have unspecified other impact via crafted JavaScript code.

Affected products

• Google Chrome: up to and including 34.0.1847.115

Published 2014-04-09. Last modified 2026-06-17.