CVE-2015-6764
The BasicJsonStringifier::SerializeJSArray function in json-stringifier.h in the JSON stringifier in Google V8, as used in Google Chrome before 47.0.2526.73, improperly loads array elements, which allows remote attackers to cause a denial of service (out-of-bounds memory access) or possibly have unspecified other impact via crafted JavaScript code.
- Affected products
- Alt Linux, Google Chrome, Opera, Red Hat, Suse
- Google Chrome
- ≤ 46.0.2490.86
- CVSS 3.1
- 9.8 CRITICAL
- EPSS
- 4.7% (91th percentile)
- Weakness
- CWE-119
- NVD status
- Modified
- Published
- 2015-12-06
CVE-2015-6764 at NVD
No indexed exploits for CVE-2015-6764 yet
Our index is partial: it proves presence, never absence
No exploit for CVE-2015-6764 has been indexed yet. Our index is built from live traffic and upstream syncs, so this page can only say what it knows — not that no exploit exists.