CVE-2018-16082: Buffer Overflow
A stack buffer overflow flaw was found in the SwiftShader component of the Chromium browser.
Upstream bug(s):
https://code.google.com/p/chromium/issues/detail?id=851398
External References:
https://chromereleases.googleblog.com/2018/09/stable-channel-update-for-desktop.html
Other sources
An out of bounds read in Swiftshader in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page.
— MITRE
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
redhat/chromium-browserto a version that resolves this vulnerability.Fixed in 69.0.3497.81 - Upgrade
Upgrade
Google Chrometo a version that resolves this vulnerability.Fixed in 69.0.3497.81
Event History
Frequently Asked Questions
What is the severity of CVE-2018-16082?
CVE-2018-16082 has been classified as a medium severity vulnerability.
How do I fix CVE-2018-16082?
To fix CVE-2018-16082, users should update to Google Chrome version 69.0.3497.81 or later.
What causes CVE-2018-16082?
CVE-2018-16082 is caused by an out of bounds read in the SwiftShader component of Google Chrome.
Which versions of Chrome are affected by CVE-2018-16082?
Versions of Google Chrome prior to 69.0.3497.81 are affected by CVE-2018-16082.
Can CVE-2018-16082 lead to remote code execution?
CVE-2018-16082 could potentially allow a remote attacker to exploit memory access issues, posing risks of unauthorized actions.