CVE-2012-2849: Off-by-one error in the GIF decoder in Google Chrome before 21.0.1180.57 on Mac OS X and Linux, and before...

Security readout for executives and security teams

CVE-2012-2849 is an old Google Chrome GIF image parsing flaw. A maliciously crafted image could crash the browser through an out-of-bounds read. The sources describe denial of service impact, not code execution, data theft, or active exploitation. Exposure is mainly legacy systems running the affected Chrome or Chrome Frame versions. Modern managed browser fleets are unlikely to be exposed, but old gold images, kiosk systems, unsupported desktops, or archived VM templates should be checked. Treat this as a legacy hygiene issue unless old Chrome builds remain in production. Business urgency rises for unmanaged endpoints, kiosks, or embedded browsing environments where browser crashes could disrupt service. Mitigation focus: Upgrade Chrome beyond the fixed versions named in the advisory.; Identify and retire any Chrome Frame deployments still present.; Check vendor release guidance for unsupported legacy environments..

Prepared

Jun 27, 2026, 17:28 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.