CVE-2016-5129
chromium-browser: memory corruption in v8
Severity Score
Exploit Likelihood
Affected Versions
Public Exploits
0Exploited in Wild
-Decision
Descriptions
Google V8 before 5.2.361.32, as used in Google Chrome before 52.0.2743.82, does not properly process left-trimmed objects, which allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via crafted JavaScript code.
Google V8 en versiones anteriores a 5.2.361.32, como se utiliza en Google Chrome en versiones anteriores a 52.0.2743.82, no procesa adecuadamente los objetos recortados por la izquierda, lo que permite a atacantes remotos provocar una denegación de servicio (corrupción de memoria) o posiblemente tener otro impacto no especificado a través de un código JavaScript manipulado.
Multiple security issues were discovered in Chromium. If a user were tricked in to opening a specially crafted website, an attacker could potentially exploit these to read uninitialized memory, cause a denial of service or execute arbitrary code. It was discovered that the PPAPI implementation does not validate the origin of IPC messages to the plugin broker process. A remote attacker could potentially exploit this to bypass sandbox protection mechanisms. Various other issues were also addressed.
CVSS Scores
SSVC
- Decision:-
Timeline
- 2016-05-31 CVE Reserved
- 2016-07-23 CVE Published
- 2024-08-06 CVE Updated
- 2025-04-12 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer
CAPEC
References (19)
| URL | Tag | Source |
|---|---|---|
| http://googlechromereleases.blogspot.com/2016/07/stable-channel-update.html | X_refsource_confirm | |
| http://www.securityfocus.com/bid/92053 | Vdb Entry | |
| http://www.securitytracker.com/id/1036428 | Vdb Entry | |
| http://www.securitytracker.com/id/1038201 | Vdb Entry | |
| https://codereview.chromium.org/2078403002 | X_refsource_confirm | |
| https://codereview.chromium.org/2102243002 | X_refsource_confirm | |
| https://codereview.chromium.org/2111133002 | X_refsource_confirm | |
| https://crbug.com/620553 | X_refsource_confirm | |
| https://source.android.com/security/bulletin/2017-04-01 | X_refsource_confirm |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Google Search vendor "Google" | Chrome Search vendor "Google" for product "Chrome" | 51.0.2704.106 Search vendor "Google" for product "Chrome" and version "51.0.2704.106" | - |
Affected
| ||||||
| Google Search vendor "Google" | V8 Search vendor "Google" for product "V8" | <= 5.2.360 Search vendor "Google" for product "V8" and version " <= 5.2.360" | - |
Affected
| ||||||