CVE-2016-1649: Buffer Overflow
The Program::getUniformInternal function in Program.cpp in libANGLE, as used in Google Chrome before 49.0.2623.108, does not properly handle a certain data-type mismatch, which allows remote attackers to cause a denial of service (buffer overflow) or possibly have unspecified other impact via crafted shader stages.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2016-1649?
CVE-2016-1649 is classified as a high severity vulnerability that can lead to denial of service due to buffer overflow.
How do I fix CVE-2016-1649?
To fix CVE-2016-1649, ensure that you update Google Chrome to version 49.0.2623.108 or later.
What types of attacks can CVE-2016-1649 enable?
CVE-2016-1649 can allow remote attackers to cause a denial of service or potentially exploit other unspecified impacts.
Which software versions are affected by CVE-2016-1649?
CVE-2016-1649 affects specific versions of Google Chrome below 49.0.2623.108 and various Linux distributions like Debian 8.0 and Ubuntu versions 14.04, 15.10, and 16.04.
Is there a workaround for CVE-2016-1649?
There is no official workaround for CVE-2016-1649 other than upgrading to a patched version of the affected software.