Buffer overflow

The Program::getUniformInternal function in Program.cpp in libANGLE, as used in Google Chrome before 49.0.2623.108, does not properly handle a certain data-type mismatch, which allows remote attackers to cause a denial of service buffer overflow or possibly have unspecified other impact via craft...

CVE-2016-1649

The Program::getUniformInternal function in Program.cpp in libANGLE, as used in Google Chrome before 49.0.2623.108, does not properly handle a certain data-type mismatch, which allows remote attackers to cause a denial of service buffer overflow or possibly have unspecified other impact via craft...

CVE-2016-1649

CVE-2016-1649 affects Google Chrome’s ANGLE component (libANGLE/Program.cpp) and is caused by a data-type mismatch in Program::getUniformInternal, leading to a denial of service via a crafted shader stage buffer overflow in Chrome before 49.0.2623.108. The issue is associated with the ANGLE libra...

CVE-2016-1649

Removed by vendor...

UBUNTU-CVE-2016-1649

The Program::getUniformInternal function in Program.cpp in libANGLE, as used in Google Chrome before 49.0.2623.108, does not properly handle a certain data-type mismatch, which allows remote attackers to cause a denial of service buffer overflow or possibly have unspecified other impact via craft...

CVE-2016-1649: Improper Restriction of Operations within the Bounds of a Memory Buffer

The Program::getUniformInternal function in Program.cpp in libANGLE, as used in Google Chrome before 49.0.2623.108, does not properly handle a certain data-type mismatch, which allows remote attackers to cause a denial of service buffer overflow or possibly have unspecified other impact via craft...

CVE-2016-1649

The Program::getUniformInternal function in Program.cpp in libANGLE, as used in Google Chrome before 49.0.2623.108, does not properly handle a certain data-type mismatch, which allows remote attackers to cause a denial of service buffer overflow or possibly have unspecified other impact via craft...

chromium: multiple issues

CVE-2016-1646: Out-of-bounds read in V8. Credit to Wen Xu from Tencent KeenLab. - CVE-2016-1647: Use-after-free in Navigation. Credit to anonymous. - CVE-2016-1648: Use-after-free in Extensions. Credit to anonymous. - CVE-2016-1649: Buffer overflow in libANGLE. Credit to lokihardt working with...

Google Fixes Four Critical Vulnerabilities in Latest Chrome Build

Google pushed out the latest version of Chrome Thursday afternoon, fixing five issues, four of them critical. The update remedies an out-of-bounds read in Chrome’s open source JavaScript engine V8, two use-after-free vulnerabilities – one in Navigation and one in Extensions – and a buffer overflo...

Google Chrome < 49.0.2623.108 Multiple Vulnerabilities

The version of Google Chrome installed on the remote Windows host is prior to 49.0.2623.108. It is, therefore, affected by multiple vulnerabilities as referenced in the 201603stable-channel-update24 advisory. - The PageCaptureSaveAsMHTMLFunction::ReturnFailure function in...

The vulnerability of Google Chrome browser allows a perpetrator to trigger a service failure.

The vulnerability of the libANGLE component in the Google Chrome browser is related to errors in the code. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

Google Chrome libANGLE code injection vulnerability

Google Chrome is an open source WEB browser. The 'Image11::map' function in the renderer/d3d/d3d11/Image11.cpp file in libANGLE, which is used by Google Chrome, does not properly handle mapping failures after device-lost events, allowing remote attackers to conduct denial-of-service attacks using...

chromium-browser: Improper error handling in libANGLE

The Image11::map function in renderer/d3d/d3d11/Image11.cpp in libANGLE, as used in Google Chrome before 46.0.2490.71, mishandles mapping failures after device-lost events, which allows remote attackers to cause a denial of service invalid read or write or possibly have unspecified other impact v...

CVE-2015-6760

The Image11::map function in renderer/d3d/d3d11/Image11.cpp in libANGLE, as used in Google Chrome before 46.0.2490.71, mishandles mapping failures after device-lost events, which allows remote attackers to cause a denial of service invalid read or write or possibly have unspecified other impact v...

CVE-2015-6760

The Image11::map function in renderer/d3d/d3d11/Image11.cpp in libANGLE, as used in Google Chrome before 46.0.2490.71, mishandles mapping failures after device-lost events, which allows remote attackers to cause a denial of service invalid read or write or possibly have unspecified other impact v...

UBUNTU-CVE-2015-6760

The Image11::map function in renderer/d3d/d3d11/Image11.cpp in libANGLE, as used in Google Chrome before 46.0.2490.71, mishandles mapping failures after device-lost events, which allows remote attackers to cause a denial of service invalid read or write or possibly have unspecified other impact v...

CVE-2015-6760

Removed by vendor...

CVE-2015-6760

The CVE-2015-6760 entry concerns the Image11::map function in libANGLE (renderer/d3d/d3d11/Image11.cpp) used by Google Chrome before 46.0.2490.71. The issue is a logic error in libANGLE that mishandles mapping failures after device-lost events, allowing a remote attacker to trigger a denial-of-se...

CVE-2015-6760

The Image11::map function in renderer/d3d/d3d11/Image11.cpp in libANGLE, as used in Google Chrome before 46.0.2490.71, mishandles mapping failures after device-lost events, which allows remote attackers to cause a denial of service invalid read or write or possibly have unspecified other impact v...

PT-2015-2399

Name of the Vulnerable Software and Affected Versions libANGLE versions prior to 46.0.2490.71 Google Chrome versions prior to 46.0.2490.71 Opera versions prior to 46.0.2490.71 Description The issue is related to the Image11::map function in libANGLE, which mishandles mapping failures after...