CVE-2016-5138 — Integer Overflow or Wraparound in Google Chrome

CWE-190 — Integer Overflow or Wraparound2 documents2 sources
Severity
8.8HIGHNVD
EPSS
1.1%
top 22.18%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Google Chrome
Timeline
PublishedAug 1
Latest updateMay 17

Description

Integer overflow in the kbasep_vinstr_attach_client function in midgard/mali_kbase_vinstr.c in Google Chrome before 52.0.2743.85 allows remote attackers to cause a denial of service (heap-based buffer overflow and use-after-free) by leveraging an unrestricted multiplication.

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HExploitability: 2.8 | Impact: 5.9

Affected Packages1 packages

▶NVDgoogle/chrome52.0.2743.82

🔴Vulnerability Details

1
GHSA
GHSA-v4v7-jch9-f94h: Integer overflow in the kbasep_vinstr_attach_client function in midgard/mali_kbase_vinstr↗2022-05-17
▶