CVE-2016-5221

MEDIUM

Google Chrome < 54.0.2840.99 - Integer Overflow

Title source: rule

Description

Type confusion in libGLESv2 in ANGLE in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android possibly allowed a remote attacker to bypass buffer validation via a crafted HTML page.

References (5)

Scores

CVSS v3 6.3
EPSS 0.0030
EPSS Percentile 53.2%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L

Classification

CWE
CWE-190
Status draft

Affected Products (1)

google/chrome < 54.0.2840.99

Timeline

Published Jan 19, 2017
Tracked Since Feb 18, 2026