CVE-2015-6764: Buffer Overflow
The BasicJsonStringifier::SerializeJSArray function in json-stringifier.h in the JSON stringifier in Google V8, as used in Google Chrome before 47.0.2526.73, improperly loads array elements, which allows remote attackers to cause a denial of service (out-of-bounds memory access) or possibly have unspecified other impact via crafted JavaScript code.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2015-6764?
CVE-2015-6764 is classified as a high severity vulnerability due to its potential to cause a denial of service.
How do I fix CVE-2015-6764?
To fix CVE-2015-6764, update your Google Chrome to version 47.0.2526.73 or later, or upgrade your affected Node.js version beyond the vulnerable ranges.
What versions of Google Chrome are affected by CVE-2015-6764?
Versions of Google Chrome prior to 47.0.2526.73 are affected by CVE-2015-6764.
Which Node.js versions are vulnerable to CVE-2015-6764?
CVE-2015-6764 affects Node.js versions from 4.0.0 to 4.1.2 and from 4.2.0 to 4.2.3, as well as 5.0.0 to 5.1.1.
Can CVE-2015-6764 be exploited remotely?
Yes, CVE-2015-6764 can be exploited remotely, allowing attackers to trigger a denial of service through out-of-bounds memory access.