CVE-2016-1646: Google Chromium V8 Out-of-Bounds Read Vulnerability
Vulnerability summary
CVE-2016-1646 is a high (CVSS 9.3) Out-of-bounds Read vulnerability in Google Chromium V8. It is known to be exploited: CISA lists it, first on 08-06-2022. EPSS estimates a 48.11% chance of exploitation in the next 30 days, higher than 98.8% of scored vulnerabilities. 1 public exploit is recorded.
Advisory lineage
Upstream 0 · Downstream 6 · Related 3Timeline
- 29-03-2016PublishedVulnerability first disclosed.
- 08-06-2022Added to CISA KEVGoogle Chromium V8 Out-of-Bounds Read Vulnerability
- 22-06-2022CISA remediation dueApply updates per vendor instructions.
- 21-10-2025Last modifiedVulnerability information updated.
Description
The Array.prototype.concat implementation in builtins.cc in Google V8, as used in Google Chrome before 49.0.2623.108, does not properly consider element data types, which allows remote attackers to cause a denial of service (out-of-bounds read) or possibly have unspecified other impact via crafted JavaScript code.
CVSS metrics
5 scores · 3 sources · 3 versions- NVDNIST8.8HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
- OSV · UbuntuEcosystem advisory · calculated8.8HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS trend
Probability
48.11%
Chance of exploitation in the next 30 days
Percentile
99%
Versus all other CVEs
30-day change
0.00 pp
From 48.11% on 18-09-2026
Known exploited
Compare KEV catalogs
CISA KEVListed- Added
- 08-06-2022
- Federal due date
- 22-06-2022
CISA required action
Apply updates per vendor instructions. nvd.nist.gov/vuln/detail/CVE-2016-1646
Public exploits
1 foundExploit Reference (code.google.com)
Maturity: unknown
Weaknesses
CWE · root causeAffected systems
Redhat4 products
Ubuntu3 products
- chromium-browser< 49.0.2623.108-0ubuntu0.14.04.1.1113 | < 49.0.2623.108-0ubuntu1.1233
- libv8-3.14All versions (No fix recorded)
- oxide-qt< 1.14.7-0ubuntu0.14.04.1 | < 1.14.7-0ubuntu1
Canonical1 product
- ubuntu_linuxEOL14.04 | 15.10 | 16.04
Debian1 product
- debian_linuxEOL8.0 | 9.0
Google1 product
- chrome< 49.0.2623.108
Suse1 product
7 vendors · 13 products
References
17 links- lists.opensuse.org/opensuse-security-announce/2016-04/msg00000.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
- lists.opensuse.org/opensuse-security-announce/2016-04/msg00039.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
- googlechromereleases.blogspot.com/2016/03/stable-channel-update_24.htmlX Refsource CONFIRMRelease NotesVendor Advisory
www.debian.org/security/2016/dsa-3531Vendor AdvisoryX Refsource DEBIANMailing ListThird Party Advisory- lists.opensuse.org/opensuse-security-announce/2016-04/msg00001.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
- code.google.com/p/chromium/issues/detail?id=594574X Refsource CONFIRMExploitIssue TrackingMailing List
Show all 17 references
- www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2016-1646Government ResourceUS Government Resource