CVE-2016-5129 Google V8 before 5.2.361.32, as used in Google Chrome before 52.0.2743.82, does not properly process left-trimmed objects, which allows remote attackers to cause a denial of service (memory corruption...
HighCVSS 8.8
EPSS 2.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Google V8 before 5.2.361.32, as used in Google Chrome before 52.0.2743.82, does not properly process left-trimmed objects, which allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via crafted JavaScript code.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Google Chrome | = 51.0.2704.106 | No fix listed |
| Google v8 | <= 5.2.360 | No fix listed |
| alpine/nodejs(Alpine:v3.6) | < 6.10.0-r0 | 6.10.0-r0 |
References
- googlechromereleases.blogspot.com
- openSUSE-SU-2016:1865 vendor-advisory
- openSUSE-SU-2016:1868 vendor-advisory
- openSUSE-SU-2016:1869 vendor-advisory
- openSUSE-SU-2016:1918 vendor-advisory
- RHSA-2016:1485 vendor-advisory
- DSA-3637 vendor-advisory
- 92053 vdb-entry
- 1036428 vdb-entry
- 1038201 vdb-entry
- USN-3041-1 vendor-advisory
- codereview.chromium.org
- codereview.chromium.org
- codereview.chromium.org
- crbug.com
- GLSA-201610-09 vendor-advisory
- source.android.com
- security.alpinelinux.org vendor-advisory