CVE-2018-16070: Integer Overflow

Q: Who is exposed to this vulnerability?

Users of affected Chromium-based browser installations are exposed when they load attacker-crafted HTML content. The issue is remotely reachable and does not require the attacker to authenticate, but exploitation requires user interaction with the crafted page.

Q: What is the security impact if exploitation succeeds?

The integer overflow can lead to heap corruption. The supplied CVSS vector rates confidentiality, integrity, and availability impact as high.

Q: Which Chrome versions are affected?

Google Chrome versions prior to 69.0.3497.81 are identified as affected in the provided data. The data also lists Red Hat and Debian chromium-browser packages, but does not provide their fixed package versions.

Published Sep 5, 2018

Updated

An integer overflow flaw was found in the Skia component of the Chromium browser.

Upstream bug(s):

https://code.google.com/p/chromium/issues/detail?id=848716

External References:

https://chromereleases.googleblog.com/2018/09/stable-channel-update-for-desktop.html

Other sources

Integer overflows in Skia in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

— MITRE

Affected Software

3 affected componentsFixes available

redhat/chromium-browser<69.0.3497.81

69.0.3497.81

Google Chrome<69.0.3497.81

debian/chromium-browser

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade redhat/chromium-browser to a version that resolves this vulnerability.
Fixed in 69.0.3497.81
Upgrade
Upgrade Google Chrome to a version that resolves this vulnerability.
Fixed in 69.0.3497.81

Event History

Jun 27, 2019

CVE Published

via MITRE·04:13 PM

Data Sourced

via MITRE·04:13 PM

DescriptionWeakness

Parent advisories

This vulnerability appears in the following advisories.

DSA-4289

Frequently Asked Questions

Who is exposed to this vulnerability?

Users of affected Chromium-based browser installations are exposed when they load attacker-crafted HTML content. The issue is remotely reachable and does not require the attacker to authenticate, but exploitation requires user interaction with the crafted page.

What is the security impact if exploitation succeeds?

The integer overflow can lead to heap corruption. The supplied CVSS vector rates confidentiality, integrity, and availability impact as high.

Which Chrome versions are affected?

Google Chrome versions prior to 69.0.3497.81 are identified as affected in the provided data. The data also lists Red Hat and Debian chromium-browser packages, but does not provide their fixed package versions.

CVE-2018-16070: Integer Overflow

Other sources

Affected Software

Remediation

Event History

Parent advisories

Frequently Asked Questions

Who is exposed to this vulnerability?

What is the security impact if exploitation succeeds?

Which Chrome versions are affected?

Company

Resources

Contact

Frequently Asked Questions

Who is exposed to this vulnerability?

What is the security impact if exploitation succeeds?

Which Chrome versions are affected?