Sploitus

CVE-2016-1646

No indexed exploits for CVE-2016-1646 yet

The Array.prototype.concat implementation in builtins.cc in Google V8, as used in Google Chrome before 49.0.2623.108, does not properly consider element data types, which allows remote attackers to cause a denial of service (out-of-bounds read) or possibly have unspecified other impact via crafted JavaScript code.

Affected products
Alt Linux, Google Chrome, Google V8, Opera, Red Hat, Suse, Ubuntu
Debian Debian Linux
= 8.0, 9.0
Fix
Available
CVSS 2.0
9.3 HIGH
CVSS 3.1
8.8 HIGH
EPSS
48.1% (99th percentile)
Weakness
CWE-125
NVD status
Analyzed
Published
2016-03-29
CVE-2016-1646 at NVD
Authoritative description, scoring and affected products

No indexed exploits for CVE-2016-1646 yet

Our index is partial: it proves presence, never absence

No exploit for CVE-2016-1646 has been indexed yet. Our index is built from live traffic and upstream syncs, so this page can only say what it knows — not that no exploit exists.