CVE-2010-0649: Integer overflow in the CrossCallParamsEx::CreateFromBuffer function in sandbox/src/crosscall_server.cc in...

Security readout for executives and security teams

This is an old Google Chrome sandbox message parsing flaw. A malicious renderer process could send a malformed sandbox message and trigger heap memory corruption, causing a crash and possibly other unspecified impact. The supplied sources identify Chrome before 4.0.249.89 as affected. Exposure is mainly legacy environments still running Google Chrome before 4.0.249.89, embedded old Chromium builds, or unmanaged systems outside browser update policy. Normal modern Chrome deployments are unlikely to be exposed based on the supplied version boundary. Treat this as a legacy exposure cleanup item unless old Chrome or embedded Chromium is present. Priority rises where unsupported browsers access sensitive systems or cannot be centrally patched. Mitigation focus: Upgrade Chrome versions older than 4.0.249.89 to a supported release.; Check vendor guidance for Chromium forks or embedded browser runtimes.; Block unsupported legacy browsers from accessing sensitive corporate applications..

Prepared

Jun 28, 2026, 09:59 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.