CVE-2016-5198 : V8 in Google Chrome prior to 54.0.2840.90 for Linux, and 54.0.2840.85 for Androi

V8 in Google Chrome prior to 54.0.2840.90 for Linux, and 54.0.2840.85 for Android, and 54.0.2840.87 for Windows and Mac included incorrect optimisation assumptions, which allowed a remote attacker to perform arbitrary read/write operations, leading to code execution, via a crafted HTML page.

Published 2017-01-19 05:59:00

Updated 2025-02-20 18:06:01

Source Chrome

View at NVD, CVE.org

Products affected by CVE-2016-5198

Redhat » Enterprise Linux Desktop » Version: 6.0
cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*
Matching versions
Redhat » Enterprise Linux Server » Version: 6.0
cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*
Matching versions
Redhat » Enterprise Linux Workstation » Version: 6.0
cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*
Matching versions
Google » Chrome
Versions before (<) 54.0.2840.90
cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*
Matching versions
When used together with: Linux » Linux Kernel » Version: N/A
Google » Chrome
Versions before (<) 54.0.2840.87
cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*
Matching versions
When used together with: Apple » Macos » Version: N/A
When used together with: Microsoft » Windows » Version: N/A
Google » Chrome
Versions before (<) 54.0.2840.85
cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*
Matching versions
When used together with: Google » Android » Version: N/A

CVE-2016-5198 is in the CISA Known Exploited Vulnerabilities Catalog

CISA vulnerability name:

Google Chromium V8 Out-of-Bounds Memory Vulnerability

CISA required action:

Apply updates per vendor instructions.

CISA description:

Google Chromium V8 Engine contains an out-of-bounds memory access vulnerability that allows a remote attacker to perform read/write operations, leading to code execution, via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited

Notes:

https://nvd.nist.gov/vuln/detail/CVE-2016-5198

Added on 2022-06-08 Action due date 2022-06-22

Exploit prediction scoring system (EPSS) score for CVE-2016-5198

EPSS FAQ

68.23%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 98 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2016-5198

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
6.8	MEDIUM	AV:N/AC:M/Au:N/C:P/I:P/A:P	8.6	6.4	NIST
Access Vector: Network Access Complexity: Medium Authentication: None Confidentiality Impact: Partial Integrity Impact: Partial Availability Impact: Partial
8.8	HIGH	CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H	2.8	5.9	NIST
Attack Vector: Network Attack Complexity: Low Privileges Required: None User Interaction: Required Scope: Unchanged Confidentiality: High Integrity: High Availability: High
8.8	HIGH	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H	2.8	5.9	134c704f-9b21-4f2e-91b3-4a467353bcc0	2025-01-29
Attack Vector: Network Attack Complexity: Low Privileges Required: None User Interaction: Required Scope: Unchanged Confidentiality: High Integrity: High Availability: High
8.8	HIGH	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H	2.8	5.9	NIST	2025-01-28
Attack Vector: Network Attack Complexity: Low Privileges Required: None User Interaction: Required Scope: Unchanged Confidentiality: High Integrity: High Availability: High

CWE ids for CVE-2016-5198

CWE-125 Out-of-bounds Read

The product reads data past the end, or before the beginning, of the intended buffer.

Assigned by: nvd@nist.gov (Primary)
CWE-787 Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.
Assigned by:
- 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)
- nvd@nist.gov (Primary)

References for CVE-2016-5198

http://rhn.redhat.com/errata/RHSA-2016-2672.html

RHSA-2016:2672 - Security Advisory - Red Hat Customer Portal
Third Party Advisory
http://www.securityfocus.com/bid/94079

Google V8 CVE-2016-5198 Unspecified Security Vulnerability
Broken Link;Third Party Advisory;VDB Entry
https://chromereleases.googleblog.com/2016/11/stable-channel-update-for-desktop.html

Chrome Releases: Stable Channel Update for Desktop
Release Notes;Vendor Advisory
https://crbug.com/659475

659475 - Pwn2Own: V8 OOB Bug. - chromium - Monorail
Exploit;Issue Tracking
http://www.securitytracker.com/id/1037224

Google Chrome Out-of-Bounds Memory Access Error in V8 Engine Has Unspecified Impact - SecurityTracker
Broken Link;Third Party Advisory;VDB Entry