Google V8 as used in Google Chrome before 12.0.742.112 performs an incorrect bounds check which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.