CVE-2017-15409 — Improper Restriction of Operations within the Bounds of a Memory Buffer in Google Chrome

CWE-119 — Improper Restriction of Operations within the Bounds of a Memory Buffer8 documents6 sources

Severity

8.8HIGHNVD

EPSS

1.0%

top 22.54%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Google Chrome Debian Linux Redhat Enterprise Linux Desktop +2 more

Timeline

PublishedAug 28

Latest updateMay 14

Description

Heap buffer overflow in Skia in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HExploitability: 2.8 | Impact: 5.9

Affected Packages4 packages

▶NVDgoogle/chrome< 63.0.3239.84

▶NVDredhat/enterprise_linux_server6.0

▶NVDredhat/enterprise_linux_desktop6.0

▶NVDredhat/enterprise_linux_workstation6.0

Also affects: Debian Linux 9.0

🔴Vulnerability Details

GHSA

GHSA-7wx2-vwj2-6382: Heap buffer overflow in Skia in Google Chrome prior to 63↗2022-05-14

▶

CVEList

CVE-2017-15409: Heap buffer overflow in Skia in Google Chrome prior to 63↗2018-08-28

▶

OSV

CVE-2017-15409: Heap buffer overflow in Skia in Google Chrome prior to 63↗2018-08-28

▶

📋Vendor Advisories

Red Hat

chromium-browser: out of bounds write in skia↗2017-12-06

▶

💬Community

Bugzilla

CVE-2017-15407 CVE-2017-15408 CVE-2017-15409 CVE-2017-15410 CVE-2017-15411 CVE-2017-15412 CVE-2017-15413 CVE-2017-15415 CVE-2017-15416 CVE-2017-15417 CVE-2017-15418 CVE-2017-15419 CVE-2017-15420 CVE-2↗2017-12-07

▶

Bugzilla

CVE-2017-15409 chromium-browser: out of bounds write in skia↗2017-12-07

▶

Bugzilla

▶