CVE-2016-5209 — Out-of-bounds Write in Google Chrome

CWE-787 — Out-of-bounds Write8 documents6 sources
Severity
8.8HIGHNVD
OSV6.1
EPSS
0.5%
top 33.51%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Google Chrome
Timeline
PublishedJan 19
Latest updateMay 14

Description

Bad casting in bitmap manipulation in Blink in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HExploitability: 2.8 | Impact: 5.9

Affected Packages1 packages

▶NVDgoogle/chrome54.0.2840.99

🔴Vulnerability Details

3
GHSA
GHSA-9423-p2jm-crp2: Bad casting in bitmap manipulation in Blink in Google Chrome prior to 55↗2022-05-14
▶
OSV
oxide-qt vulnerabilities↗2016-12-09
▶
OSV
CVE-2016-5209: Bad casting in bitmap manipulation in Blink in Google Chrome prior to 55↗2016-12-06
▶

📋Vendor Advisories

2
Ubuntu
Oxide vulnerabilities↗2016-12-09
▶
Red Hat
chromium-browser: out of bounds write in blink↗2016-12-01
▶

💬Community

2
Bugzilla
chromium: various flaws [fedora-all]↗2016-12-02
▶
Bugzilla
CVE-2016-5209 chromium-browser: out of bounds write in blink↗2016-12-02
▶