CVE-2018-16083: High severity Google Chrome vulnerability
An out of bounds read flaw was found in the WebRTC component of the Chromium browser.
Upstream bug(s):
https://code.google.com/p/chromium/issues/detail?id=856823
External References:
https://chromereleases.googleblog.com/2018/09/stable-channel-update-for-desktop.html
Other sources
An out of bounds read in forward error correction code in WebRTC in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.
— MITRE
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
redhat/chromium-browserto a version that resolves this vulnerability.Fixed in 69.0.3497.81 - Upgrade
Upgrade
Google Chrometo a version that resolves this vulnerability.Fixed in 69.0.3497.81
Event History
Frequently Asked Questions
What is the severity of CVE-2018-16083?
CVE-2018-16083 has a high severity rating due to its potential to allow remote attackers to read out of bounds memory.
How do I fix CVE-2018-16083?
The recommended fix for CVE-2018-16083 is to update Google Chrome or Chromium to version 69.0.3497.81 or later.
Which versions of Chrome are affected by CVE-2018-16083?
CVE-2018-16083 affects all versions of Google Chrome prior to 69.0.3497.81.
What component is primarily affected by CVE-2018-16083?
The WebRTC component of the Chromium browser is primarily affected by CVE-2018-16083.
Can CVE-2018-16083 be exploited through a crafted HTML page?
Yes, CVE-2018-16083 can be exploited by a remote attacker via a crafted HTML page.