CVE-2016-1639

Critical

Published: 06/03/2016(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

A use-after-free vulnerability in the WebRTC Audio Private API implementation in Google Chrome before version 49.0.2623.75 allows remote attackers to cause a denial of service or possibly have unspecified other impact by leveraging incorrect reliance on the resource context pointer.

Risk Assessment

Organizations may be exposed to attacks that lead to denial of service, potentially affecting service availability and user data security.

Recommendation

It is recommended to update Google Chrome to the latest version to mitigate this vulnerability.

Original NVD description (English source)

Use-after-free vulnerability in browser/extensions/api/webrtc_audio_private/webrtc_audio_private_api.cc in the WebRTC Audio Private API implementation in Google Chrome before 49.0.2623.75 allows remote attackers to cause a denial of service or possibly have unspecified other impact by leveraging incorrect reliance on the resource context pointer.