CVE-2012-2864: Mesa, as used in Google Chrome before 21.0.1183.0 on the Acer AC700, Cr-48, and Samsung Series 5 and 5 550...

Security readout for executives and security teams

This CVE describes a Mesa array overflow that could let a remote attacker run arbitrary code on specific early Chromebook and Chromebox platforms running Google Chrome before 21.0.1183.0. The public bundle does not describe the attack vector, affected Mesa versions, or active exploitation. Likely exposure is concentrated in legacy Chrome OS devices or old Linux systems covered by the referenced Mesa advisories. Current managed Chrome OS fleets are unlikely to be exposed if they are updated, but unsupported devices or archived images should be checked. Prioritize this only where legacy Chrome OS devices, old images, or unpatched Mesa packages still exist. The impact is severe, but the age of the issue and lack of cited active exploitation reduce urgency for modern, patched environments. Mitigation focus: Update affected Chrome OS systems beyond Google Chrome 21.0.1183.0.; Apply Mesa updates from the relevant Linux vendor advisory.; Retire or isolate unsupported Chromebook and Chromebox devices..

Prepared

Jun 28, 2026, 00:52 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.