CVE-2012-2819
Status: ModifiedMedium (6.8)—
Severity6.8Medium · CVSS 2.0
Exploitation probability1.00 %higher than 62% of CVEs
Active exploitationNonot in the CISA catalog
Public exploitNot knownno public code found
The texSubImage2D implementation in the WebGL subsystem in Google Chrome before 20.0.1132.43 does not properly handle uploads to floating-point textures, which allows remote attackers to cause a denial of service (assertion failure and application crash) or possibly have unspecified other impact via a crafted web page, as demonstrated by certain WebGL performance tests, aka rdar problem 11520387.
CVSS
- Base score
- 6.8
- Version
- 2.0
- Vector
- AV:N/AC:M/Au:N/C:P/I:P/A:P
Exploitation probability (EPSS)
- Probability of exploitation in the next 30 days
- 1.00 %
- Percentile among all scored CVEs
- 62
- Score date
- 10/22/2026
EPSS (Exploit Prediction Scoring System, FIRST) estimates how likely a vulnerability is to be exploited in the wild within 30 days. It complements CVSS (impact) and CISA KEV (confirmed exploitation).
Affected technologies (1)
CWEs
- CWE-20
References
Show 16 references
- http://code.google.com/p/chromium/issues/detail?id=120977
- http://googlechromereleases.blogspot.com/2012/06/stable-channel-update_26.html
- http://trac.webkit.org/changeset/117191
- http://trac.webkit.org/changeset/118410
- https://bugs.webkit.org/show_bug.cgi?id=85942
- https://chromiumcodereview.appspot.com/10444013
- https://hermes.opensuse.org/messages/15075728
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14938
- http://code.google.com/p/chromium/issues/detail?id=120977
- http://googlechromereleases.blogspot.com/2012/06/stable-channel-update_26.html
- http://trac.webkit.org/changeset/117191
- http://trac.webkit.org/changeset/118410
- https://bugs.webkit.org/show_bug.cgi?id=85942
- https://chromiumcodereview.appspot.com/10444013
- https://hermes.opensuse.org/messages/15075728
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14938
Raw JSON (NVD)
Show
{
"id": "CVE-2012-2819",
"cveTags": [],
"metrics": {
"cvssMetricV2": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"version": "2.0",
"baseScore": 6.8,
"accessVector": "NETWORK",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"authentication": "NONE",
"integrityImpact": "PARTIAL",
"accessComplexity": "MEDIUM",
"availabilityImpact": "PARTIAL",
"confidentialityImpact": "PARTIAL"
},
"acInsufInfo": false,
"impactScore": 6.4,
"baseSeverity": "MEDIUM",
"obtainAllPrivilege": false,
"exploitabilityScore": 8.6,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": true
}
]
},
"affected": [
{
"source": "chrome-cve-admin@google.com",
"affectedData": [
{
"vendor": "n/a",
"product": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
]
}
],
"published": "2012-06-27T10:18:38.837",
"references": [
{
"url": "http://code.google.com/p/chromium/issues/detail?id=120977",
"source": "chrome-cve-admin@google.com"
},
{
"url": "http://googlechromereleases.blogspot.com/2012/06/stable-channel-update_26.html",
"source": "chrome-cve-admin@google.com"
},
{
"url": "http://trac.webkit.org/changeset/117191",
"source": "chrome-cve-admin@google.com"
},
{
"url": "http://trac.webkit.org/changeset/118410",
"source": "chrome-cve-admin@google.com"
},
{
"url": "https://bugs.webkit.org/show_bug.cgi?id=85942",
"source": "chrome-cve-admin@google.com"
},
{
"url": "https://chromiumcodereview.appspot.com/10444013",
"source": "chrome-cve-admin@google.com"
},
{
"url": "https://hermes.opensuse.org/messages/15075728",
"source": "chrome-cve-admin@google.com"
},
{
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14938",
"source": "chrome-cve-admin@google.com"
},
{
"url": "http://code.google.com/p/chromium/issues/detail?id=120977",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://googlechromereleases.blogspot.com/2012/06/stable-channel-update_26.html",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://trac.webkit.org/changeset/117191",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://trac.webkit.org/changeset/118410",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://bugs.webkit.org/show_bug.cgi?id=85942",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://chromiumcodereview.appspot.com/10444013",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://hermes.opensuse.org/messages/15075728",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14938",
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "CWE-20"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "The texSubImage2D implementation in the WebGL subsystem in Google Chrome before 20.0.1132.43 does not properly handle uploads to floating-point textures, which allows remote attackers to cause a denial of service (assertion failure and application crash) or possibly have unspecified other impact via a crafted web page, as demonstrated by certain WebGL performance tests, aka rdar problem 11520387."
},
{
"lang": "es",
"value": "La implementación texSubImage2D en el subsistema WebGL en Google Chrome anterior a v20.0.1132.43 no controla correctamente la carga de texturas de punto flotante, lo cual permite a atacantes remotos provocar una denegación de servicio (error de aserción y caída de la aplicación) o posiblemente tener otros impactos a través de una página web manipulada, como lo demuestran ciertos test de rendimiento en WebGL, también conocido como problema rdar 11520387."
}
],
"lastModified": "2026-06-16T23:42:09.550",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0C5E7E3F-3DF6-466D-825E-7484B7F0ED0E",
"versionEndIncluding": "20.0.1132.42"
},
{
"criteria": "cpe:2.3:a:google:chrome:20.0.1132.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5559EFC8-18F4-4E5A-9198-E86D0A2D95DE"
},
{
"criteria": "cpe:2.3:a:google:chrome:20.0.1132.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F2D24BBC-FED3-4744-AC61-CB11531E9D48"
},
{
"criteria": "cpe:2.3:a:google:chrome:20.0.1132.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B4C0FF1E-CE10-45EC-B35C-0D5623697998"
},
{
"criteria": "cpe:2.3:a:google:chrome:20.0.1132.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "74ACE4E5-56D6-4EDC-8E92-9937A87D28CE"
},
{
"criteria": "cpe:2.3:a:google:chrome:20.0.1132.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "EC1BC2A3-CE9B-4D6F-B9D5-D408B714468B"
},
{
"criteria": "cpe:2.3:a:google:chrome:20.0.1132.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0F2A3129-C209-4E67-AD08-2DA3D289FB37"
},
{
"criteria": "cpe:2.3:a:google:chrome:20.0.1132.6:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D3E3C624-A446-44CC-8141-410E521A21AE"
},
{
"criteria": "cpe:2.3:a:google:chrome:20.0.1132.7:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8BE627E1-DFCB-40D0-A84C-16AE80C73E52"
},
{
"criteria": "cpe:2.3:a:google:chrome:20.0.1132.8:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D6694631-7054-48AF-B046-32694BFA5DCC"
},
{
"criteria": "cpe:2.3:a:google:chrome:20.0.1132.9:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A09C563A-5541-4799-9F6E-B20ABD211185"
},
{
"criteria": "cpe:2.3:a:google:chrome:20.0.1132.10:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "FCCF11B8-1997-4930-AEF2-D008B55D3CB3"
},
{
"criteria": "cpe:2.3:a:google:chrome:20.0.1132.11:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2BB5CC75-658A-455A-9BB2-D702523E66FC"
},
{
"criteria": "cpe:2.3:a:google:chrome:20.0.1132.12:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "13341A40-4EDF-4E15-A693-95F7DEDA9803"
},
{
"criteria": "cpe:2.3:a:google:chrome:20.0.1132.13:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "55EA4229-47F8-435E-8475-8E79D5AD7340"
},
{
"criteria": "cpe:2.3:a:google:chrome:20.0.1132.14:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "32C0848C-4A1A-4068-8384-F7FC9314B096"
},
{
"criteria": "cpe:2.3:a:google:chrome:20.0.1132.15:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A6A5FC9C-F50E-48BA-88F3-9CCE0EF23F44"
},
{
"criteria": "cpe:2.3:a:google:chrome:20.0.1132.16:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "08192C42-C286-4694-B45E-25FC177FF8FD"
},
{
"criteria": "cpe:2.3:a:google:chrome:20.0.1132.17:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D6CEE0F7-7795-4FB0-BE4E-11795661CE66"
},
{
"criteria": "cpe:2.3:a:google:chrome:20.0.1132.18:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A0B04B9A-302F-48BB-BCBC-4B2302F73F67"
},
{
"criteria": "cpe:2.3:a:google:chrome:20.0.1132.19:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A7C41D41-F357-4AA4-AF10-1740E0F65A61"
},
{
"criteria": "cpe:2.3:a:google:chrome:20.0.1132.20:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "BEE569D4-8DC2-44BD-9FEC-4C8E18C1E10F"
},
{
"criteria": "cpe:2.3:a:google:chrome:20.0.1132.21:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "71E32C87-CABE-464D-85AE-E5A53E954317"
},
{
"criteria": "cpe:2.3:a:google:chrome:20.0.1132.22:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E7004E55-4987-4ADF-B99E-8EE85AC2E626"
},
{
"criteria": "cpe:2.3:a:google:chrome:20.0.1132.23:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "EBE6A4F6-3903-452C-999A-A26629CC6DEB"
},
{
"criteria": "cpe:2.3:a:google:chrome:20.0.1132.24:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "757DFB66-2F5F-421E-8014-8CE3E0E83F4D"
},
{
"criteria": "cpe:2.3:a:google:chrome:20.0.1132.25:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "85675AB6-CA91-462F-903A-7F9A2400A4E6"
},
{
"criteria": "cpe:2.3:a:google:chrome:20.0.1132.26:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B78196D7-8D7F-483B-A587-DCD94FE28E22"
},
{
"criteria": "cpe:2.3:a:google:chrome:20.0.1132.27:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1DC91ABB-129A-467E-9900-D84886BE068E"
},
{
"criteria": "cpe:2.3:a:google:chrome:20.0.1132.28:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0CD4E658-4860-425F-A890-B234791BD2D2"
},
{
"criteria": "cpe:2.3:a:google:chrome:20.0.1132.29:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "06FF0461-D045-4BC5-B20D-28C7D3A12BE2"
},
{
"criteria": "cpe:2.3:a:google:chrome:20.0.1132.30:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5CB5D96D-9642-4B48-98A2-713E05977948"
},
{
"criteria": "cpe:2.3:a:google:chrome:20.0.1132.31:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7EDE7D7B-490C-490D-9F2A-00DF72598ACF"
},
{
"criteria": "cpe:2.3:a:google:chrome:20.0.1132.32:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2485E36F-E014-45F9-80D2-79CC560DD68D"
},
{
"criteria": "cpe:2.3:a:google:chrome:20.0.1132.33:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "85809C6A-B4C9-4B57-A295-2805A789F495"
},
{
"criteria": "cpe:2.3:a:google:chrome:20.0.1132.34:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E1DFFBD0-5E00-453B-B33A-A94B43278F33"
},
{
"criteria": "cpe:2.3:a:google:chrome:20.0.1132.35:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6A04F552-DB31-4F27-A1ED-38A1D857E6CE"
},
{
"criteria": "cpe:2.3:a:google:chrome:20.0.1132.36:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C49C1C7C-D235-45F2-B54A-E82DCF29E53A"
},
{
"criteria": "cpe:2.3:a:google:chrome:20.0.1132.37:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1B0FBAF0-31DE-42DA-B9A0-9E06DB4C59ED"
},
{
"criteria": "cpe:2.3:a:google:chrome:20.0.1132.38:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "56C38A9D-20A6-4AE9-93DA-00D69130907D"
},
{
"criteria": "cpe:2.3:a:google:chrome:20.0.1132.39:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6529FF3F-6316-4093-8F93-1977809C6151"
},
{
"criteria": "cpe:2.3:a:google:chrome:20.0.1132.40:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "18A1B84B-B5AC-4E4A-83C6-601C3D359527"
},
{
"criteria": "cpe:2.3:a:google:chrome:20.0.1132.41:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5F1B10F5-D24A-4614-B9D4-927380E02011"
}
],
"operator": "OR"
}
]
}
],
"sourceIdentifier": "chrome-cve-admin@google.com"
}