CVE-2016-1691: Buffer Overflow
A heap buffer-overflow flaw was found in the Skia component of the Chromium browser.
Upstream bug(s):
https://code.google.com/p/chromium/issues/detail?id=597926
External References:
http://googlechromereleases.blogspot.com/2016/05/stable-channel-update25.html
Other sources
Skia, as used in Google Chrome before 51.0.2704.63, mishandles coincidence runs, which allows remote attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via crafted curves, related to SkOpCoincidence.cpp and SkPathOpsCommon.cpp.
— MITRE
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2016-1691?
CVE-2016-1691 has a severity rating that indicates it can lead to a denial of service due to a heap-based buffer overflow.
How do I fix CVE-2016-1691?
To fix CVE-2016-1691, update Google Chrome to version 51.0.2704.63 or later.
What is the impact of CVE-2016-1691?
The impact of CVE-2016-1691 may result in application crashes or other unspecified effects due to buffer overflow vulnerabilities.
Which software versions are affected by CVE-2016-1691?
CVE-2016-1691 affects various versions of Google Chrome prior to 51.0.2704.63 and certain Linux distributions using impacted libraries.
Can CVE-2016-1691 be exploited remotely?
Yes, CVE-2016-1691 can be exploited remotely by attackers through crafted curves.