CVE-2016-1646highunder attackCWE-125

CVE-2016-1646

Published · Updated

Follow this CVE+ Monitor Chrome

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

63Vexday Risk Score

Prioritize patching. It under exploitation confirmed by CISA.

ssvc Actcvss 8.8epss 48%
from disclosure to weapon
Published on NVDMar 29
CISA KEV+2262d
What the vendors declare (VEX)

Official vendor statements in CSAF/VEX format: whether their product is affected, already fixed, or ruled out — and why. These are the vendor's assertions, not Vexday's judgment.

Red HatVEX document ↗
Fixed
3 products (12 components)
Red Hat Enterprise Linux Desktop Supplementary (v. 6) · Red Hat Enterprise Linux Server Supplementary (v. 6) · Red Hat Enterprise Linux Workstation Supplementary (v. 6)
fix ↗
Action required by CISAfederal deadline: 2022-06-22

Apply updates per vendor instructions.

In short

Google Chrome's JavaScript engine had a flaw in how it handled array concatenation, allowing attackers to crash the browser or potentially execute code through specially crafted web pages.

Technical detail

CWE-125 out-of-bounds read in V8's Array.prototype.concat due to improper element type validation; remote attack vector via malicious JavaScript in web content; pre-condition requires user to visit or interact with crafted page; impact ranges from DoS to potential arbitrary code execution.

Summary generated and translated by AI from the official description.

The full analysis of this CVE is available in Portuguese →

The Array.prototype.concat implementation in builtins.cc in Google V8, as used in Google Chrome before 49.0.2623.108, does not properly consider element data types, which allows remote attackers to cause a denial of service (out-of-bounds read) or possibly have unspecified other impact via crafted JavaScript code.
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Affected products
n/a · n/a