8.8
CVSSv3

CVE-2016-1653

Published: 18/04/2016 Updated: 07/11/2023
CVSS v2 Base Score: 9.3 | Impact Score: 10 | Exploitability Score: 8.6
CVSS v3 Base Score: 8.8 | Impact Score: 5.9 | Exploitability Score: 2.8
VMScore: 829
Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C

Vulnerability Summary

The LoadBuffer implementation in Google V8, as used in Google Chrome prior to 50.0.2661.75, mishandles data types, which allows remote malicious users to cause a denial of service or possibly have unspecified other impact via crafted JavaScript code that triggers an out-of-bounds write operation, related to compiler/pipeline.cc and compiler/simplified-lowering.cc.

Vulnerable Product Search on Vulmon Subscribe to Product

debian debian linux 8.0

suse linux enterprise 12.0

opensuse leap 42.1

canonical ubuntu linux 16.04

canonical ubuntu linux 15.10

canonical ubuntu linux 14.04

google chrome

Vendor Advisories

Several security issues were fixed in Oxide ...
Several vulnerabilities have been discovered in the chromium web browser CVE-2016-1651 An out-of-bounds read issue was discovered in the pdfium library CVE-2016-1652 A cross-site scripting issue was discovered in extension bindings CVE-2016-1653 Choongwoo Han discovered an out-of-bounds write issue in the v8 javascript library ...
The LoadBuffer implementation in Google V8, as used in Google Chrome before 500266175, mishandles data types, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via crafted JavaScript code that triggers an out-of-bounds write operation, related to compiler/pipelinecc and compiler/simplified-lowe ...