CVE-2016-1646 · netVigilance record NV22-0448
Google Chromium V8 Out-of-Bounds Read
past due
What to do
Apply updates per vendor instructions.
CISA deadline 2022-06-22 · passed 4 years 2 months ago · applies to US federal civilian agencies; used elsewhere as a reference SLA
What happened
Google Chromium V8 Engine contains an out-of-bounds read vulnerability that allows a remote attacker to cause a denial of service or possibly have another unspecified impact via crafted JavaScript code. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.
Who is affected
Google Chromium V8. Affected version ranges are listed in the vendor advisory and the NVD entry linked under Sources.
Weakness class: CWE-119.
Timeline
- Added to CISA KEVExploitation in the wild confirmed by CISA
- CISA remediation deadlinepassed 4 years 2 months ago
Sources
- NVD entry for CVE-2016-1646 nvd.nist.gov/vuln/detail/CVE-2016-1646
- CISA Known Exploited Vulnerabilities catalog www.cisa.gov/known-exploited-vulnerabilities-catalog
- nvd.nist.gov nvd.nist.gov/vuln/detail/CVE-2016-1646