CVE-2016-1679: Use After Free
A heap use-after-free flaw was found in the V8 bindings component of the Chromium browser.
Upstream bug(s):
https://code.google.com/p/chromium/issues/detail?id=606390
External References:
http://googlechromereleases.blogspot.com/2016/05/stable-channel-update25.html
Other sources
The ToV8Value function in content/child/v8valueconverterimpl.cc in the V8 bindings in Google Chrome before 51.0.2704.63 does not properly restrict use of getters and setters, which allows remote attackers to cause a denial of service (use-after-free) or possibly have unspecified other impact via crafted JavaScript code.
— MITRE
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2016-1679?
CVE-2016-1679 has been rated as a moderate severity vulnerability due to its potential to cause a denial of service and unspecified impacts.
How do I fix CVE-2016-1679?
To fix CVE-2016-1679, update Google Chrome to version 51.0.2704.63 or later.
What software is affected by CVE-2016-1679?
CVE-2016-1679 affects multiple versions of Google Chrome prior to version 51.0.2704.63.
Can CVE-2016-1679 lead to remote code execution?
CVE-2016-1679 does not directly indicate remote code execution, but it can cause a denial of service which may lead to other vulnerabilities being exploited.
Is there a workaround for CVE-2016-1679?
There is no known workaround for CVE-2016-1679, making it essential to apply the update to mitigate the vulnerability.