CVE Catalog

CVE-2016-1662

Critical
Published: Translated: NVD NIST

Summary

In Google Chrome before version 50.0.2661.94, there is a vulnerability in gc_callback.cc that does not prevent fallback execution once the Garbage Collection callback has started. This allows remote attackers to cause a denial of service (use-after-free) or possibly have unspecified other impact.

Risk Assessment

This vulnerability may lead to denial of service, affecting application availability and potentially creating other unspecified risks to the system.

Recommendation

It is recommended to update Google Chrome to version 50.0.2661.94 or later to mitigate this vulnerability.

Original NVD description (English source)

extensions/renderer/gc_callback.cc in Google Chrome before 50.0.2661.94 does not prevent fallback execution once the Garbage Collection callback has started, which allows remote attackers to cause a denial of service (use-after-free) or possibly have unspecified other impact via unknown vectors.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS