Google Chrome before 25.0.1364.97 on Windows and Linux and before 25.0.1364.99 on Mac OS X does not properly manage memory during message handling for plug-ins which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.