CVE-2015-6764

Critical

Published: 06/12/2015(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

The BasicJsonStringifier::SerializeJSArray function in json-stringifier.h in the JSON stringifier in Google V8, as used in Google Chrome before version 47.0.2526.73, improperly loads array elements. This allows remote attackers to cause a denial of service (out-of-bounds memory access) or possibly have unspecified other impact via crafted JavaScript code.

Risk Assessment

The organization may be exposed to attacks that lead to denial of service, affecting the availability of applications and systems. Additionally, there is a risk of unspecified impacts that could affect data security.

Recommendation

It is recommended to update Google Chrome to version 47.0.2526.73 or later to mitigate this vulnerability. Also, monitor applications using the V8 engine for potential threats.

Original NVD description (English source)

The BasicJsonStringifier::SerializeJSArray function in json-stringifier.h in the JSON stringifier in Google V8, as used in Google Chrome before 47.0.2526.73, improperly loads array elements, which allows remote attackers to cause a denial of service (out-of-bounds memory access) or possibly have unspecified other impact via crafted JavaScript code.