CVE-2016-1709: google chrome

Vulnerability summary

CVE-2016-1709 is a high (CVSS 8.8) vulnerability in google chrome. EPSS estimates a 1.50% chance of exploitation in the next 30 days, higher than 74.3% of scored vulnerabilities.

Timeline

1. 23-07-2016
   PublishedVulnerability first disclosed.
2. 05-08-2024
   Last modifiedVulnerability information updated.

Description

Heap-based buffer overflow in the ByteArray::Get method in data/byte_array.cc in Google sfntly before 2016-06-10, as used in Google Chrome before 52.0.2743.82, allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted SFNT font.

• CWE-119Improper Restriction of Operations within the Bounds of a Memory BufferThe product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary.