CVE-2016-1646: Google Chromium V8 Out-of-Bounds Read Vulnerability
Google Chromium V8 Engine contains an out-of-bounds read vulnerability that allows a remote attacker to cause a denial of service or possibly have another unspecified impact via crafted JavaScript code. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.
Other sources
The Array.prototype.concat implementation in builtins.cc in Google V8, as used in Google Chrome before 49.0.2623.108, does not properly consider element data types, which allows remote attackers to cause a denial of service (out-of-bounds read) or possibly have unspecified other impact via crafted JavaScript code.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Google Chromiumto a version that resolves this vulnerability.Fixed in 49.0.2623.108
Event History
Frequently Asked Questions
What is the severity of CVE-2016-1646?
CVE-2016-1646 has a high severity rating due to its potential to cause denial of service.
How do I fix CVE-2016-1646?
To mitigate CVE-2016-1646, update Google Chrome or the affected Chromium-based applications to the latest version.
What systems are affected by CVE-2016-1646?
CVE-2016-1646 affects systems using Google Chromium V8 engine, including various versions of Google Chrome and operating systems like Debian and Ubuntu.
Can CVE-2016-1646 be exploited remotely?
Yes, CVE-2016-1646 can be exploited remotely through crafted JavaScript code.
What are the potential impacts of CVE-2016-1646?
The impacts of CVE-2016-1646 include possible denial of service and other unspecified vulnerabilities depending on the context of exploitation.