Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
7.5

Google Chrome: Uninitialized Memory in ICU Library

CVE-2014-7940 · published 11 years ago
Summary

A security flaw in Google Chrome's ICU library can cause the browser to crash or behave unexpectedly when processing certain text sequences. This issue affects Google Chrome versions prior to 40.0.2214.91. To protect your users, update to the latest version of Google Chrome.

What to do
  • Update debian icu to version 52.1-7.1.
Affected software
Ecosystem VendorProductAffected versions
Debian:11 debian icu < 52.1-7.1
Fix: upgrade to 52.1-7.1
Debian:12 debian icu < 52.1-7.1
Fix: upgrade to 52.1-7.1
Debian:13 debian icu < 52.1-7.1
Fix: upgrade to 52.1-7.1
Debian:14 debian icu < 52.1-7.1
Fix: upgrade to 52.1-7.1
– google chrome <= 40.0.2214.85
cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*
– icu-project international_components_for_unicode <= 52.1
cpe:2.3:a:icu-project:international_components_for_unicode:*:*:*:*:*:c\/c\+\+:*:*
Original advisory text
The collator implementation in i18n/ucol.cpp in International Components for Unicode (ICU) 52 through SVN revision 293126, as used in Google Chrome before 40.0.2214.91, does not initialize memory f...
The collator implementation in i18n/ucol.cpp in International Components for Unicode (ICU) 52 through SVN revision 293126, as used in Google Chrome before 40.0.2214.91, does not initialize memory for a data structure, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted character sequence.
References
Severity
7.5 High
Exploitation
2% chance of attack within 30 days
Type
CWE-399Resource Management Errors
Timeline
Published22 Jan 2015
Updated4 Nov 2026
First seen18 Aug 2026
Sources
DEBIAN-CVE-2014-7940 · OSV
CVE-2014-7940 · NVD
Track software like this
Free during beta