CVE-2010-4489: libvpx, as used in Google Chrome before 8.0.552.215 and possibly other products, allows remote attackers to...

Security readout for executives and security teams

This is an old libvpx flaw that affected Google Chrome before 8.0.552.215. A malicious WebM video could crash or disrupt the browser through an out-of-bounds read. Sources describe denial of service, not code execution. Evidence for other affected products is incomplete. Exposure is most likely in very old Chrome deployments or products bundling the vulnerable libvpx version. Modern managed browsers are unlikely to be affected, but embedded, kiosk, legacy, or unmaintained systems should be checked. Treat as a legacy hygiene issue unless old Chrome or embedded libvpx remains in use. Business urgency rises for public-facing kiosks, unmanaged desktops, or systems processing untrusted WebM files. Mitigation focus: Upgrade Google Chrome to 8.0.552.215 or later where applicable.; Inventory software that bundles libvpx and review vendor guidance.; Prioritize legacy browsers, kiosks, and unmanaged endpoints for remediation..

Prepared

Jun 28, 2026, 01:17 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.