CVE-2014-1745: Use After Free
Published May 21, 2014
·Updated
Accessibility. A privacy issue was addressed with improved private data redaction for log entries.
Other sources
AMD. A buffer overflow issue was addressed with improved memory handling.
— Apple
AMD. The issue was addressed with improved bounds checks.
— Apple
App Store. A privacy issue was addressed with improved private data redaction for log entries.
— Apple
Apple Neural Engine. An out-of-bounds write issue was addressed with improved bounds checking.
— Apple
Apple Neural Engine. The issue was addressed with improved memory handling.
— Apple
Credit
Adam M., Ye Zhang@@VAR10CK(Baidu Security), an anonymous researcher, Jubaer Alnazi(TRS Group of Companies), Csaba Fitzl@@theevilbit(Offensive Security), ryuzaki, Meysam Firouzi@@R00tkitSMM(Mbition Mercedes), jzhu(Trend Micro Zero Day Initiative), Pan ZhenPeng@@Peterpan0927(STAR Labs SG Pte), Pan ZhenPeng(STAR Labs SG Pte), Zechao Cai@@Zech4o(Zhejiang University), Adam Doupé(ASU SEFCOM), sqrtpwn, Félix Poulin-Bélanger, David Pan Ogea, an anonymous researcher(Red Canary), Brandon Dalton@@partyD0lphin(Red Canary), Milan Tenk(F), (F), Arthur Valiev(F), Mickey Jin@@patch1t, Zweig(Kunlun Lab), Abhay Kailasia@@abhay_kailasia(Lakshmi Narain College Of Technology Bhopal), Zhuowei Zhang, developStorm, Anton Spivak, Yiğit Can YILMAZ@@yilmazcanyigit, Jubaer Alnazi Jabin(TRS Group Of Companies), (Alibaba Group), Wenchao Li(Alibaba Group), Xiaolong Bai(Alibaba Group), Xin Huang@@11iaxH, Gertjan Franken(imec), KU Leuven, hazbinhotel(Trend Micro Zero Day Initiative), Hyeon Park@@tree_segment(Team ApplePIE), Georgy Kucherin@@kucher1n(Kaspersky), Leonid Bezvershenko@@bzvr_(Kaspersky), Boris Larin@@oct0xor(Kaspersky), (Kaspersky), Valentin Pashkov(Kaspersky), Anonymous(Trend Micro Zero Day Initiative), Dohyun Lee@@l33d0hyun(SSD Labs), crixer@@pwning_me(SSD Labs), Tingting Yin(Tsinghua University), Itay Iellin(General Motors Product Cyber Security), Etienne Charron(Renault), Khadim Dieng(Renault), JeongOhKyea, Jianjun Dai(360 Vulnerability Research Institute), Guang Gong(360 Vulnerability Research Institute), Mohamed GHANNAM@@_simo36, Mohamed GHANNAM, Mohamed Ghannam@@_simo36, Rıza Sabuncu@@rizasabuncu, Joshua Jones, Khiem Tran, Mickey Jin@@patch1t(FFRI Security Inc), Koh M. Nakagawa(FFRI Security Inc), (Offensive Security), Masahiro Kawada@@kawakatz(GMO Cybersecurity by Ierae), Guilherme Rambo(Best Buddy Apps), CVE-2023-0049, CVE-2023-0051, CVE-2023-0054, CVE-2023-0288, CVE-2023-0433, CVE-2023-0512, Aleksandar Nikolic(Cisco Talos), Mikko Kenttälä )@@Turmio_(SensorFu), Murray Mike, Arsenii Kostromin (0x3c3e), Xinru Chi(Pangu Lab), Ned Williamson(Google Project Zero), ABC Research s.r.o., Wojciech Reguła@@_r3ggi(SecuRing), Chan Shue Long(Offensive Security), Junoh Lee at Theori, CVE-2022-43551, CVE-2022-43552
Affected Software
84 affected componentsFixes available
macOS Ventura<13.3
13.3
Google Chrome<=35.0.1916.113
Google Chrome=35.0.1916.0
Google Chrome=35.0.1916.1
Google Chrome=35.0.1916.2
Google Chrome=35.0.1916.3
Google Chrome=35.0.1916.4
Google Chrome=35.0.1916.5
Google Chrome=35.0.1916.6
Google Chrome=35.0.1916.7
Google Chrome=35.0.1916.8
Google Chrome=35.0.1916.9
Google Chrome=35.0.1916.10
Google Chrome=35.0.1916.11
Google Chrome=35.0.1916.13
Google Chrome=35.0.1916.14
Google Chrome=35.0.1916.15
Google Chrome=35.0.1916.17
Google Chrome=35.0.1916.18
Google Chrome=35.0.1916.19
Google Chrome=35.0.1916.20
Google Chrome=35.0.1916.21
Google Chrome=35.0.1916.22
Google Chrome=35.0.1916.23
Google Chrome=35.0.1916.27
Google Chrome=35.0.1916.31
Google Chrome=35.0.1916.32
Google Chrome=35.0.1916.33
Google Chrome=35.0.1916.34
Google Chrome=35.0.1916.35
Google Chrome=35.0.1916.36
Google Chrome=35.0.1916.37
Google Chrome=35.0.1916.38
Google Chrome=35.0.1916.39
Google Chrome=35.0.1916.40
Google Chrome=35.0.1916.41
Google Chrome=35.0.1916.42
Google Chrome=35.0.1916.43
Google Chrome=35.0.1916.44
Google Chrome=35.0.1916.45
Google Chrome=35.0.1916.46
Google Chrome=35.0.1916.47
Google Chrome=35.0.1916.48
Google Chrome=35.0.1916.49
Google Chrome=35.0.1916.51
Google Chrome=35.0.1916.52
Google Chrome=35.0.1916.54
Google Chrome=35.0.1916.56
Google Chrome=35.0.1916.57
Google Chrome=35.0.1916.59
Google Chrome=35.0.1916.61
Google Chrome=35.0.1916.68
Google Chrome=35.0.1916.69
Google Chrome=35.0.1916.71
Google Chrome=35.0.1916.72
Google Chrome=35.0.1916.74
Google Chrome=35.0.1916.77
Google Chrome=35.0.1916.80
Google Chrome=35.0.1916.82
Google Chrome=35.0.1916.84
Google Chrome=35.0.1916.85
Google Chrome=35.0.1916.86
Google Chrome=35.0.1916.88
Google Chrome=35.0.1916.90
Google Chrome=35.0.1916.92
Google Chrome=35.0.1916.93
Google Chrome=35.0.1916.95
Google Chrome=35.0.1916.96
Google Chrome=35.0.1916.98
Google Chrome=35.0.1916.99
Google Chrome=35.0.1916.101
Google Chrome=35.0.1916.103
Google Chrome=35.0.1916.104
Google Chrome=35.0.1916.105
Google Chrome=35.0.1916.106
Google Chrome=35.0.1916.107
Google Chrome=35.0.1916.108
Google Chrome=35.0.1916.109
Google Chrome=35.0.1916.110
Google Chrome=35.0.1916.111
Google Chrome=35.0.1916.112
Safari<16.4
16.4
Apple iOS and iPadOS<16.4
16.4
Apple iOS, iPadOS, and macOS<16.4
16.4
Event History
May 21, 2014
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·11:14 AM
DescriptionSeverityWeaknessAffected Software
Mar 27, 2023
Data Sourced
via Apple·12:00 AM
DescriptionWeaknessAffected Software
Updated
via Apple·12:00 AM
DescriptionWeakness
Updated
via Apple·12:00 AM
Description
Mar 18, 2024
Data Sourced
via Red Hat·04:05 PM
DescriptionSeverityAffected Software
Parent advisories
This vulnerability appears in the following advisories.
Peer vulnerabilities
Found alongside the following vulnerabilities.
- CVE-2023-32436
- CVE-2023-27968
- CVE-2023-28209
- CVE-2023-28210
- CVE-2023-28211
- CVE-2023-28212
- CVE-2023-28213
- CVE-2023-28214
- CVE-2023-28215
- CVE-2023-32356
- CVE-2023-23532
- CVE-2023-23527
- CVE-2023-27931
- CVE-2023-28179
- CVE-2023-42830
- CVE-2023-27951
- CVE-2023-27961
- CVE-2023-23543
- CVE-2023-23534
- CVE-2023-27955
- CVE-2023-27936
- CVE-2023-40398
- CVE-2023-28181
- CVE-2023-32426
- CVE-2022-43551
- CVE-2022-43552
- CVE-2023-27934
- CVE-2023-28180
- CVE-2023-27935
- CVE-2023-27953
- CVE-2023-27958
- CVE-2023-40433
- CVE-2023-28190
- CVE-2023-23537
- CVE-2023-28195
- CVE-2023-27956
- CVE-2023-32366
- CVE-2023-27937
- CVE-2023-23526
- CVE-2023-27928
- CVE-2023-27939
- CVE-2023-27947
- CVE-2023-27948
- CVE-2023-42862
- CVE-2023-42865
- CVE-2023-23535
- CVE-2023-27929
- CVE-2023-27946
- CVE-2023-27957
- CVE-2023-32378
- CVE-2023-28187
- CVE-2023-27941
- CVE-2023-28199
- CVE-2023-23536
- CVE-2023-23514
- CVE-2023-27969
- CVE-2023-27933
- CVE-2023-28200
- CVE-2023-27943
- CVE-2023-23525
- CVE-2023-40383
- CVE-2023-41075
- CVE-2023-28189
- CVE-2023-28197
- CVE-2023-27950
- CVE-2023-27949
- CVE-2023-28182
- CVE-2023-23538
- CVE-2023-27962
- CVE-2023-23523
- CVE-2023-27942
- CVE-2023-32362
- CVE-2023-27952
- CVE-2023-23533
- CVE-2023-28178
- CVE-2023-27966
- CVE-2023-27963
- CVE-2023-23542
- CVE-2023-28192
- CVE-2023-28188
- CVE-2023-0049
- CVE-2023-0051
- CVE-2023-0054
- CVE-2023-0288
- CVE-2023-0433
- CVE-2023-0512
- CVE-2023-32370
- CVE-2023-28198
- CVE-2023-32435
- CVE-2023-27932
- CVE-2023-27954
- CVE-2014-1745
- CVE-2023-32358
- CVE-2023-28201
- CVE-2023-27944
- CVE-2023-23541
- CVE-2023-23540
- CVE-2023-27959
- CVE-2023-27970
- CVE-2023-23494
- CVE-2023-23528
- CVE-2023-28185
- CVE-2023-32424
- CVE-2022-46724
- CVE-2023-28194
- CVE-2022-46725
- CVE-2022-46705
- CVE-2023-28207
Frequently Asked Questions
1
What is the severity of CVE-2014-1745?
CVE-2014-1745 is categorized as a high severity vulnerability due to its potential impact on user privacy and data handling.
2
How do I fix CVE-2014-1745?
To fix CVE-2014-1745, update Google Chrome to version 35.0.1916.114 or later, as this version includes the necessary security patches.
3
What types of issues are addressed in CVE-2014-1745?
CVE-2014-1745 addresses privacy issues through improved data redaction in log entries and memory handling vulnerabilities due to buffer overflow.
4
Which versions of Google Chrome are affected by CVE-2014-1745?
CVE-2014-1745 affects Google Chrome versions up to and including 35.0.1916.113.
5
Is CVE-2014-1745 specific to Google Chrome?
Yes, CVE-2014-1745 is specifically associated with vulnerabilities found in Google Chrome.