CVE-2017-15418 — Improper Restriction of Operations within the Bounds of a Memory Buffer in Google Chrome

CWE-119 — Improper Restriction of Operations within the Bounds of a Memory Buffer7 documents5 sources

Severity

4.3MEDIUMNVD

EPSS

0.4%

top 40.44%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Google Chrome Debian Linux Redhat Enterprise Linux Desktop +2 more

Timeline

PublishedAug 28

Latest updateMay 14

Description

Use of uninitialized memory in Skia in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:NExploitability: 2.8 | Impact: 1.4

Affected Packages4 packages

▶NVDgoogle/chrome< 63.0.3239.84

▶NVDredhat/enterprise_linux_server6.0

▶NVDredhat/enterprise_linux_desktop6.0

▶NVDredhat/enterprise_linux_workstation6.0

Also affects: Debian Linux 9.0

🔴Vulnerability Details

GHSA

GHSA-p68h-mwpj-wv3w: Use of uninitialized memory in Skia in Google Chrome prior to 63↗2022-05-14

▶

OSV

CVE-2017-15418: Use of uninitialized memory in Skia in Google Chrome prior to 63↗2018-08-28

▶

📋Vendor Advisories

Red Hat

chromium-browser: use of uninitialized value in skia↗2017-12-06

▶

💬Community

Bugzilla

CVE-2017-15407 CVE-2017-15408 CVE-2017-15409 CVE-2017-15410 CVE-2017-15411 CVE-2017-15412 CVE-2017-15413 CVE-2017-15415 CVE-2017-15416 CVE-2017-15417 CVE-2017-15418 CVE-2017-15419 CVE-2017-15420 CVE-2↗2017-12-07

▶

Bugzilla

CVE-2017-15418 chromium-browser: use of uninitialized value in skia↗2017-12-07

▶

Bugzilla

▶