CVE-2016-1646
HighActively exploited (CISA KEV)
Description
The Array.prototype.concat implementation in builtins.cc in Google V8, as used in Google Chrome before 49.0.2623.108, does not properly consider element data types, which allows remote attackers to cause a denial of service (out-of-bounds read) or possibly have unspecified other impact via crafted JavaScript code.
SeverityHigh
CVSS8.8
Exploit probability—
Product
Google Chromium V8
PublishedMar 29, 2016
First seenMar 29, 2016
Added to KEVJun 8, 2022
Weakness typeCWE-125Out-of-bounds read
How to fix
CISA required action
Apply updates per vendor instructions.
CISA due date: Jun 22, 2022Update
- google chrome49.0.2623.108 or later
Vendor advisories
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| google chrome | v < 49.0.2623.108 | 49.0.2623.108 |
| debian debian_linux | 8.0, 9.0 | — |
| canonical ubuntu_linux | 14.04, 15.10, 16.04 | — |
| suse package_hub | No range specified | — |
| opensuse leap | 42.1 | — |
| opensuse opensuse | 13.1 | — |
| redhat enterprise_linux_desktop | 6.0 | — |
| redhat enterprise_linux_eus | 6.7 | — |
| redhat enterprise_linux_server | 6.0 | — |
| redhat enterprise_linux_workstation | 6.0 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.