CVE-2015-1214: Integer overflow in the SkAutoSTArray implementation in include/core/SkTemplates.h in the filters implement...

Security readout for executives and security teams

This is a 2015 memory-safety flaw in Skia, the graphics library used by Chrome. Malicious content could make vulnerable Chrome builds write outside intended memory, causing a crash or possibly other unspecified impact. Public sources identify the issue as fixed in Chrome 41.0.2272.76. No provided source shows active exploitation. Most exposure should be historical: unsupported Chrome or Chromium-derived packages from before the March 2015 fixes. Modern managed browsers are unlikely to remain affected if patching is current. Embedded, kiosk, legacy Linux, or frozen appliance builds deserve attention if they include old Chromium or Skia code. Treat as a legacy exposure cleanup item, not a current emergency based on provided evidence. Prioritize environments with old browsers, kiosk systems, or embedded Chromium where normal browser auto-update controls may not apply. Mitigation focus: Upgrade Chrome or Chromium packages to versions containing the 41.0.2272.76-era fix or later.; Apply relevant vendor updates from Ubuntu, Gentoo, Red Hat, or the product maintainer.; Identify embedded products that bundle old Chromium or Skia and request vendor patch status..

Prepared

Jun 14, 2026, 05:11 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.