CVE-2016-1691

HIGH

Skia <51.0.2704.63 - DoS

Title source: llm

Description

Skia, as used in Google Chrome before 51.0.2704.63, mishandles coincidence runs, which allows remote attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via crafted curves, related to SkOpCoincidence.cpp and SkPathOpsCommon.cpp.

Exploits (1)

github NO CODE 31 stars
by OpenSISE · cpoc
https://github.com/OpenSISE/CVE_PoC_Collect/tree/master/Browser/CVE-2016-1691.html

References (12)

Scores

CVSS v3 7.5
EPSS 0.0122
EPSS Percentile 79.1%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

Details

CWE
CWE-119
Status published
Products (11)
canonical/ubuntu_linux 14.04
canonical/ubuntu_linux 15.10
canonical/ubuntu_linux 16.04
debian/debian_linux 8.0
google/chrome < 50.0.2661.102
opensuse/leap 42.1
opensuse/opensuse 13.2
redhat/enterprise_linux_desktop 6.0
redhat/enterprise_linux_server 6.0
redhat/enterprise_linux_workstation 6.0
... and 1 more
Published Jun 05, 2016
Tracked Since Feb 18, 2026