CVE-2016-9642 JavaScriptCore in WebKit allows attackers to cause a denial of service (out-of-bounds heap read) via a crafted Javascript file.
MediumCVSS 5.5
EPSS 1.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
JavaScriptCore in WebKit allows attackers to cause a denial of service (out-of-bounds heap read) via a crafted Javascript file.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ubuntu/qtwebkit-opensource-src(Ubuntu:22.04) | All versions | No fix listed |
| webkit | All versions | No fix listed |
| ubuntu/qtwebkit-opensource-src(Ubuntu:24.04) | All versions | No fix listed |
References
- Ubuntu CVE tracker vendor-advisory
- USN-3257-1 vendor-advisory
- www.cve.org
- [oss-security] 20161126 Re: CVE request: Heap read out-of-bounds parsing a Javascript file with the last revision of JavaScript Core mailing-list third-party-advisory
- 94554 third-party-advisory vdb-entry
- 1038137 vdb-entry
- GLSA-201706-15 vendor-advisory