CVE-2016-1646 The Array.prototype.concat implementation in builtins.cc in Google V8, as used in Google Chrome before 49.0.2623.108, does not properly consider element data types, which allows remote attackers to ca...
HighCVSS 8.8
EPSS 48.1%
CISA KEV
added 2022-06-08 · due 2022-06-22
Exploited in the wild
- Published
- Updated
- Exploit status
- Exploited in the wild (confirmed)
Description
The Array.prototype.concat implementation in builtins.cc in Google V8, as used in Google Chrome before 49.0.2623.108, does not properly consider element data types, which allows remote attackers to cause a denial of service (out-of-bounds read) or possibly have unspecified other impact via crafted JavaScript code.
CISA Known Exploited Vulnerability
- Date added
- 2022-06-08
- Due date (FCEB)
- 2022-06-22
- Ransomware use
- Unknown
Required action
Apply updates per vendor instructions.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian linux | = 8.0 | No fix listed |
| debian linux | = 9.0 | No fix listed |
| Canonical Ubuntu Linux | = 14.04 | No fix listed |
| Canonical Ubuntu Linux | = 15.10 | No fix listed |
| Canonical Ubuntu Linux | = 16.04 | No fix listed |
| Google Chrome | < 49.0.2623.108 | 49.0.2623.108 |
| SUSE package hub | All versions | No fix listed |
| openSUSE leap | = 42.1 | No fix listed |
| opensuse | = 13.1 | No fix listed |
| redhat enterprise linux desktop | = 6.0 | No fix listed |
| redhat enterprise linux eus | = 6.7 | No fix listed |
| redhat enterprise linux server | = 6.0 | No fix listed |
| redhat enterprise linux workstation | = 6.0 | No fix listed |
References
- googlechromereleases.blogspot.com release-notes vendor-advisory
- openSUSE-SU-2016:0929 mailing-list third-party-advisory vendor-advisory
- openSUSE-SU-2016:0930 mailing-list third-party-advisory vendor-advisory
- openSUSE-SU-2016:1059 mailing-list third-party-advisory vendor-advisory
- RHSA-2016:0525 third-party-advisory vendor-advisory
- DSA-3531 mailing-list third-party-advisory vendor-advisory
- 1035423 broken-link third-party-advisory vdb-entry
- USN-2955-1 third-party-advisory vendor-advisory
- code.google.com exploit issue-tracking mailing-list
- codereview.chromium.org patch
- GLSA-201605-02 third-party-advisory vendor-advisory
- www.cisa.gov government-resource us-government-resource