CVE-2012-2864

critical

Published 2012-08-22 · Modified 2026-04-29

💬 Discuss on Community ✚ Propose mitigation

CVSS v3

—

CVSS v4 NEW

—

not yet in upstream

VIR risk

10.0

Description

Mesa, as used in Google Chrome before 21.0.1183.0 on the Acer AC700, Cr-48, and Samsung Series 5 and 5 550 Chromebook platforms, and the Samsung Chromebox Series 3, allows remote attackers to execute arbitrary code via unspecified vectors that trigger an "array overflow."

Predictions

Exploit likelihood

20%

Patch ETA

—

Heuristic predictions, AS-IS, for prioritization only.

Mitigations

Mitigation details

Source: Debian Security Tracker · View original ↗ · DFSG

CVE-2012-2864 NameCVE-2012-2864 DescriptionMesa, as used in Google Chrome before 21.0.1183.0 on the Acer AC700, Cr-48, and Samsung Series 5 and 5 550 Chromebook platforms, and the Samsung Chromebox Series 3, allows remote attackers to execute arbitrary code via unspecified vectors that trigger an "array overflow." SourceCVE (at NVD; CERT, ENISA, LWN, oss-sec, fulldisc, Debian ELTS, Red Hat,…

CVE-2012-2864

Name	CVE-2012-2864
Description	Mesa, as used in Google Chrome before 21.0.1183.0 on the Acer AC700, Cr-48, and Samsung Series 5 and 5 550 Chromebook platforms, and the Samsung Chromebox Series 3, allows remote attackers to execute arbitrary code via unspecified vectors that trigger an "array overflow."
Source	CVE (at NVD; CERT, ENISA, LWN, oss-sec, fulldisc, Debian ELTS, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more)
Debian Bugs	685667

Vulnerable and fixed packages

The table below lists information on source packages.

Source Package	Release	Version	Status
mesa (PTS)	bullseye	20.3.5-1	fixed
	bookworm	22.3.6-1+deb12u1	fixed
	trixie	25.0.7-2	fixed
	forky	26.0.6-1	fixed
	sid	26.0.8-1	fixed

The information below is based on the following data on fixed versions.

Package	Type	Release	Fixed Version	Urgency	Origin	Debian Bugs
mesa	source	squeeze	(not affected)
mesa	source	(unstable)	8.0.4-2			685667

Notes

[squeeze] - mesa <not-affected> (Vulnerable code not present)

Home - Debian Security - Source (Git)

Apply commands

text fix

Notes

[squeeze] - mesa <not-affected> (Vulnerable code not present)

OS impact

Debian Fixed 5 releases

Version	Status	Fixed in
trixie	Fixed	`8.0.4-2`
sid	Fixed	`8.0.4-2`
forky	Fixed	`8.0.4-2`
bullseye	Fixed	`8.0.4-2`
bookworm	Fixed	`8.0.4-2`

References

CWEs

CWE-119

Community-verified mitigations for this CVE will appear above when contributors publish them.

Verify integrity in audit chain (admin only). AS-IS.