CVE-2016-1702: Buffer Overflow
An out-of-bounds read flaw was found in the Skia component of the Chromium browser.
Upstream bug(s):
https://code.google.com/p/chromium/issues/detail?id=609260
External References:
http://googlechromereleases.blogspot.com/2016/06/stable-channel-update.html
Other sources
The SkRegion::readFromMemory function in core/SkRegion.cpp in Skia, as used in Google Chrome before 51.0.2704.79, does not validate the interval count, which allows remote attackers to cause a denial of service (out-of-bounds read) via crafted serialized data.
— MITRE
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2016-1702?
CVE-2016-1702 has a moderate severity rating due to its potential for denial of service from out-of-bounds reads.
How do I fix CVE-2016-1702?
To fix CVE-2016-1702, update Google Chrome to version 51.0.2704.79 or later.
Which versions of software are affected by CVE-2016-1702?
CVE-2016-1702 affects multiple versions of Google Chrome prior to 51.0.2704.79 and various Linux distributions with older versions of Chrome.
What exploit does CVE-2016-1702 allow attackers to perform?
CVE-2016-1702 allows attackers to execute a denial of service attack via crafted serialized data leading to out-of-bounds read.
Is there a specific OS that CVE-2016-1702 impacts?
CVE-2016-1702 impacts various operating systems running Google Chrome, including multiple Linux distributions.