CVE-2016-1669 PUBLISHED

The Zone::New function in zone.cc in Google V8 before 5.0.71.47, as used in Google Chrome before 50.0.2661.102, does not properly determine when to expand certain memory allocations, which allows remote attackers to cause a denial of service (buffer overflow) or possibly have unspecified other impact via crafted JavaScript code.

EPSS 1.63% · 81.7th percentile

Risk Scores

EPSS Score
1.63%
81.7th percentile

Affected Products

VendorProductVersions
Ubuntu:16.04:LTSoxide-qt1.11.4-0ubuntu1, 1.11.3-0ubuntu3, 1.10.3-0ubuntu0.15.10.2
Ubuntu:14.04:LTSoxide-qt1.7.9-0ubuntu0.14.04.1, 0, 1.0.0~bzr437-0ubuntu1
Ubuntu:18.04:LTSlibv8-3.143.14.5.8-11ubuntu1, 0
Ubuntu:14.04:LTSchromium-browser49.0.2623.87-0ubuntu0.14.04.1.1112, 48.0.2564.116-0ubuntu0.14.04.1.1111, 48.0.2564.82-0ubuntu0.14.04.1.1108
Ubuntu:16.04:LTSlibv8-3.140, 3.14.5.8-5ubuntu2
Ubuntu:16.04:LTSchromium-browser47.0.2526.73-0ubuntu1.1218, 47.0.2526.106-0ubuntu1.1221, 48.0.2564.82-0ubuntu1.1222

Timeline

References

Open in Interactive Console →