CVE-2016-1646: Google Chromium V8 Out-of-Bounds Read Vulnerability

CVE-2016-1646 · Severity: critical · CVSS 8.8 · Exploited in the wild · Published 2022-06-08

Technologies: Google Chrome, Google Chromium V8. Vendors: Google.

Executive brief

The Array.prototype.concat implementation in builtins.cc in Google V8 Engine does not properly consider element data types. This allows a remote attacker to cause an out-of-bounds read, leading to a denial of service or other unspecified impacts via crafted JavaScript code.

Affected products

Google V8 Engine before 49.0.2623.108
Google Chrome before 49.0.2623.108

Timeline

2016-03-24: patched: Stable Channel Update for Google Chrome 49.0.2623.108
2022-06-08: kev added: Added to CISA Known Exploited Vulnerabilities Catalog
2022-06-08: disclosed

Related threats

Out of bounds write in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via
Type confusion in V8 in Google Chrome prior to 152.0.7977.82 allowed a remote attacker to execute arbitrary code inside the sandbox via a cr
Google Chrome V8 out of bounds read and write
Google Chromium V8 memory corruption in JavaScript engine
Google Chrome type confusion in V8 engine