CVE-2016-1688: Buffer Overflow
An out-of-bounds read flaw was found in the V8 component of the Chromium browser.
Upstream bug(s):
https://code.google.com/p/chromium/issues/detail?id=604897
External References:
http://googlechromereleases.blogspot.com/2016/05/stable-channel-update25.html
Other sources
The regexp (aka regular expression) implementation in Google V8 before 5.0.71.40, as used in Google Chrome before 51.0.2704.63, mishandles external string sizes, which allows remote attackers to cause a denial of service (out-of-bounds read) via crafted JavaScript code.
— MITRE
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2016-1688?
CVE-2016-1688 has been classified as a denial of service vulnerability due to its ability to cause an out-of-bounds read.
How do I fix CVE-2016-1688?
To mitigate CVE-2016-1688, upgrade Google Chrome to version 51.0.2704.63 or later.
Which software versions are affected by CVE-2016-1688?
CVE-2016-1688 affects Google V8 versions prior to 5.0.71 and Google Chrome versions prior to 51.0.2704.63.
What type of attack can exploit CVE-2016-1688?
CVE-2016-1688 can be exploited through crafted JavaScript code that triggers an out-of-bounds read.
Is CVE-2016-1688 still a concern for current systems?
CVE-2016-1688 is no longer a concern for systems that have been updated beyond the affected versions.