CVE-2016-1702

MEDIUM · 6.5 CVSS Gepubliceerd: 06-06-2016 CWE-119

Beschrijving

The SkRegion::readFromMemory function in core/SkRegion.cpp in Skia, as used in Google Chrome before 51.0.2704.79, does not validate the interval count, which allows remote attackers to cause a denial of service (out-of-bounds read) via crafted serialized data.

Vendors

Canonical Debian Opensuse Redhat Suse Google

Affected products

Ubuntu Linux Debian Linux Leap Opensuse Enterprise Linux Desktop Enterprise Linux Server Enterprise Linux Workstation Linux Enterprise Chrome

References

googlechromereleases.blogspot.com
lists.opensuse.org
lists.opensuse.org
lists.opensuse.org
www.debian.org
www.securitytracker.com
www.ubuntu.com
access.redhat.com
codereview.chromium.org
crbug.com