CVE-2016-5221: Integer Overflow
Published Jan 19, 2017
·Updated
Type confusion in libGLESv2 in ANGLE in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android possibly allowed a remote attacker to bypass buffer validation via a crafted HTML page.
Affected Software
1 affected component
Google Chrome<=54.0.2840.99
Event History
Jan 19, 2017
CVE Published
via MITRE·05:43 AM
Data Sourced
via MITRE·05:43 AM
DescriptionWeakness
Data Sourced
via NVD·05:59 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2016-5221?
CVE-2016-5221 has been classified as a high severity vulnerability.
2
How do I fix CVE-2016-5221?
To fix CVE-2016-5221, update Google Chrome to version 55.0.2883.75 or higher.
3
What platforms are affected by CVE-2016-5221?
CVE-2016-5221 affects Google Chrome on Mac, Windows, Linux, and Android.
4
Can CVE-2016-5221 be exploited remotely?
Yes, CVE-2016-5221 can be exploited by a remote attacker via a crafted HTML page.
5
What does the vulnerability CVE-2016-5221 involve?
CVE-2016-5221 involves type confusion in libGLESv2 in ANGLE within Google Chrome.