CVE-2016-1678
mediumpriority · track · 36EPSS 0.016 · 76 %ileEURUUSEPSS · scored 2026-10-27
objects.cc in Google V8 before 5.0.71.32, as used in Google Chrome before 51.0.2704.63, does not properly restrict lazy deoptimization, which allows remote attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via crafted JavaScript code.
cvss
Technical severity, 0–10. One row per scoring source.
base score 0–10 · higher = more severe · hover a vector to decode⚠ sources disagree · medium–high · 6.8–8.8
weaknesses
The CWE weakness classes this flaw belongs to.
affected products (15)
Products and version ranges known to be affected.
- redhat enterprise linux workstation= 6.0nvdUScpe:2.3:o:redhat:enterprise_linux_workstation:*:*:*:*:*:*:*:*
also known as (4)
Other names and identifiers for this entity.
sources
Which sources assert this record, and when.
references (33)
External citations — patches, advisories, analysis.
- http://googlechromereleases.blogspot.com/2016/05/stable-channel-update_25.htmlcnnvd
- http://packetstormsecurity.com/files/137264/Debian-Security-Advisory-3590-1.htmlcnnvd
- http://packetstormsecurity.com/files/137266/Red-Hat-Security-Advisory-2016-1190-01.htmlcnnvd
- http://www.auscert.org.au/./render.html?it=35302cnnvd
- http://www.auscert.org.au/./render.html?it=35314cnnvd
- http://www.debian.org/security/2016/dsa-3590cnnvd
- https://access.redhat.com/errata/RHSA-2016:1190cnnvd
- https://codereview.chromium.org/1875053002cnnvd
Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.
Free scan