CVE-2016-5221 — Integer Overflow or Wraparound in Google Chrome

CWE-190 — Integer Overflow or Wraparound8 documents6 sources
Severity
6.3MEDIUMNVD
OSV6.1
EPSS
0.3%
top 46.36%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Google Chrome
Timeline
PublishedJan 19
Latest updateMay 14

Description

Type confusion in libGLESv2 in ANGLE in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android possibly allowed a remote attacker to bypass buffer validation via a crafted HTML page.

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:LExploitability: 2.8 | Impact: 3.4

Affected Packages1 packages

▶NVDgoogle/chrome54.0.2840.99

🔴Vulnerability Details

3
GHSA
GHSA-2gj2-5v4g-j7xv: Type confusion in libGLESv2 in ANGLE in Google Chrome prior to 55↗2022-05-14
▶
OSV
oxide-qt vulnerabilities↗2016-12-09
▶
OSV
CVE-2016-5221: Type confusion in libGLESv2 in ANGLE in Google Chrome prior to 55↗2016-12-06
▶

📋Vendor Advisories

2
Ubuntu
Oxide vulnerabilities↗2016-12-09
▶
Red Hat
chromium-browser: integer overflow in angle↗2016-12-01
▶

💬Community

2
Bugzilla
chromium: various flaws [fedora-all]↗2016-12-02
▶
Bugzilla
CVE-2016-5221 chromium-browser: integer overflow in angle↗2016-12-02
▶