CVE-2016-1654: Input Validation
Published Apr 18, 2016
·Updated
The media subsystem in Google Chrome before 50.0.2661.75 does not initialize an unspecified data structure, which allows remote attackers to cause a denial of service (invalid read operation) via unknown vectors.
Affected Software
7 affected components
Debian Debian Linux=8.0
openSUSE Leap=42.1
SUSE Linux Enterprise=12.0
Google Chrome<=49.0.2623.112
Canonical Ubuntu Linux=14.04
Canonical Ubuntu Linux=15.10
Canonical Ubuntu Linux=16.04
Event History
Apr 18, 2016
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2016-1654?
CVE-2016-1654 is rated as a high severity vulnerability due to its potential for causing denial of service.
2
How do I fix CVE-2016-1654?
To fix CVE-2016-1654, users should update Google Chrome to version 50.0.2661.75 or later.
3
What type of attack does CVE-2016-1654 allow?
CVE-2016-1654 allows remote attackers to cause a denial of service through an invalid read operation.
4
Which versions of Google Chrome are affected by CVE-2016-1654?
Google Chrome versions prior to 50.0.2661.75 are affected by CVE-2016-1654.
5
Is CVE-2016-1654 specific to any operating system?
CVE-2016-1654 affects Google Chrome across multiple operating systems including Debian, openSUSE, SUSE Linux Enterprise, and Ubuntu.