Search for vulnerabilities
Vulnerability details: VCID-fbdf-q6pu-6kf1
Vulnerability ID VCID-fbdf-q6pu-6kf1
Aliases CVE-2014-1523
Summary Security researcher Abhishek Arya (Inferno) of the Google Chrome Security Team used the Address Sanitizer tool to discover a fixed offset out of bounds read issue while decoding specifically formatted JPG format images. This causes a non-exploitable crash.
Status Published
Exploitability 0.5
Weighted Severity 0.0
Risk None
Affected and Fixed Packages Package Details
Weaknesses (1)
CWE-125 Out-of-bounds Read
System Score Found at
epss 0.0054 https://api.first.org/data/v1/epss?cve=CVE-2014-1523
epss 0.0054 https://api.first.org/data/v1/epss?cve=CVE-2014-1523
epss 0.0054 https://api.first.org/data/v1/epss?cve=CVE-2014-1523
epss 0.0054 https://api.first.org/data/v1/epss?cve=CVE-2014-1523
epss 0.0054 https://api.first.org/data/v1/epss?cve=CVE-2014-1523
epss 0.0054 https://api.first.org/data/v1/epss?cve=CVE-2014-1523
epss 0.0054 https://api.first.org/data/v1/epss?cve=CVE-2014-1523
epss 0.0054 https://api.first.org/data/v1/epss?cve=CVE-2014-1523
epss 0.0054 https://api.first.org/data/v1/epss?cve=CVE-2014-1523
epss 0.0054 https://api.first.org/data/v1/epss?cve=CVE-2014-1523
epss 0.0054 https://api.first.org/data/v1/epss?cve=CVE-2014-1523
epss 0.0054 https://api.first.org/data/v1/epss?cve=CVE-2014-1523
epss 0.0054 https://api.first.org/data/v1/epss?cve=CVE-2014-1523
epss 0.0054 https://api.first.org/data/v1/epss?cve=CVE-2014-1523
epss 0.0054 https://api.first.org/data/v1/epss?cve=CVE-2014-1523
epss 0.0054 https://api.first.org/data/v1/epss?cve=CVE-2014-1523
epss 0.0054 https://api.first.org/data/v1/epss?cve=CVE-2014-1523
generic_textual none https://www.mozilla.org/en-US/security/advisories/mfsa2014-37
Reference id Reference type URL
https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1523.json
https://api.first.org/data/v1/epss?cve=CVE-2014-1523
1092660 https://bugzilla.redhat.com/show_bug.cgi?id=1092660
CVE-2014-1523 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1523
mfsa2014-37 https://www.mozilla.org/en-US/security/advisories/mfsa2014-37
RHSA-2014:0448 https://access.redhat.com/errata/RHSA-2014:0448
RHSA-2014:0449 https://access.redhat.com/errata/RHSA-2014:0449
USN-2185-1 https://usn.ubuntu.com/2185-1/
USN-2189-1 https://usn.ubuntu.com/2189-1/
No exploits are available.
Exploit Prediction Scoring System (EPSS)
Percentile 0.66599
EPSS Score 0.0054
Published At July 30, 2025, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2025-07-31T08:10:44.794038+00:00 Mozilla Importer Import https://github.com/mozilla/foundation-security-advisories/blob/master/announce/2014/mfsa2014-37.md 37.0.0