Published: 09/01/2019 Updated: 07/11/2023

CVSS v2 Base Score: 6.8 | Impact Score: 6.4 | Exploitability Score: 8.6

CVSS v3 Base Score: 8.8 | Impact Score: 5.9 | Exploitability Score: 2.8

VMScore: 685

Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P

An out of bounds read in forward error correction code in WebRTC in Google Chrome before 69.0.3497.81 allowed a remote malicious user to perform an out of bounds memory read via a crafted HTML page.

Vulnerable Product	Search on Vulmon	Subscribe to Product
google chrome
redhat enterprise linux desktop 6.0
redhat enterprise linux server 6.0
redhat enterprise linux workstation 6.0

Synopsis Important: chromium-browser security update Type/Severity Security Advisory: Important Topic An update for chromium-browser is now available for Red Hat Enterprise Linux 6 SupplementaryRed Hat Product Security has rated this update as having a security impact of Important A Common Vulnerability S ...

Several vulnerabilities have been discovered in the chromium web browser CVE-2018-16065 Brendon Tiszka discovered an out-of-bounds write issue in the v8 javascript library CVE-2018-16066 cloudfuzzer discovered an out-of-bounds read issue in blink/webkit CVE-2018-16067 Zhe Jin discovered an out-of-bounds read issue in the WebAudi ...

An out of bounds read in forward error correction code in WebRTC in Google Chrome prior to 690349781 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page ...

There is an out-of-bounds read in FEC processing in WebRTC If a very short RTP packet is received, FEC will assume the packet is longer and process data outside of the allocated buffer This bug causes the following ASAN crash: ==109993==ERROR: AddressSanitizer: heap-buffer-overflow on address 0x61b003b7ff70 at pc 0x55e01a250cd1 bp 0x7fa3af7abc4 ...

CWE-125 http://www.securityfocus.com/bid/105215 https://www.exploit-db.com/exploits/45444/https://access.redhat.com/errata/RHSA-2018:2666 https://chromereleases.googleblog.com/2018/09/stable-channel-update-for-desktop.html https://security.gentoo.org/glsa/201811-10 https://crbug.com/856823 https://access.redhat.com/errata/RHSA-2018:2666 https://nvd.nist.gov https://www.exploit-db.com/exploits/45444/https://www.debian.org/security/./dsa-4289

CVE-2018-16083

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

Exploits

References

Vulmon Search

About

Products

Connect