Endpoint Vulnerability

Security Vulnerability CVE-2016-1688 for Google Chrome

Description

The regexp (aka regular expression) implementation in Google V8 before 5.0.71.40, as used in Google Chrome before 51.0.2704.63, mishandles external string sizes, which allows remote attackers to cause a denial of service (out-of-bounds read) via crafted JavaScript code.

Affected Products

Google Chrome

References

CVE-2016-1688,