Vulnerability CVE-2016-1649: Information

Description

The Program::getUniformInternal function in Program.cpp in libANGLE, as used in Google Chrome before 49.0.2623.108, does not properly handle a certain data-type mismatch, which allows remote attackers to cause a denial of service (buffer overflow) or possibly have unspecified other impact via crafted shader stages.

Severity: HIGH (8.8) Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

URL: https://nvd.nist.gov/vuln/detail/CVE-2016-1649
Published: March 29, 2016
Modified: Nov. 7, 2023
Error type identifier: CWE-119

Fixed packages

Package name
Branch
Fixed in version
Version from repository
Errata ID
Task #
State
chromiumsisyphus49.0.2623.108-alt1125.0.6422.141-alt1ALT-PU-2016-1283-1160464Fixed
chromiump1049.0.2623.108-alt1119.0.6045.159-alt0.p10.1ALT-PU-2016-1283-1160464Fixed
chromiump949.0.2623.108-alt197.0.4692.99-alt0.p9.1ALT-PU-2016-1283-1160464Fixed
chromiumc10f149.0.2623.108-alt1110.0.5481.177-alt1.p10.1ALT-PU-2016-1283-1160464Fixed
chromiumc9f249.0.2623.108-alt184.0.4147.105-alt1.1.p9ALT-PU-2016-1283-1160464Fixed
chromiump1149.0.2623.108-alt1125.0.6422.141-alt1ALT-PU-2016-1283-1160464Fixed

References to Advisories, Solutions, and Tools

Hyperlink
Resource
https://code.google.com/p/chromium/issues/detail?id=595836
    RHSA-2016:0525
      openSUSE-SU-2016:0929
        openSUSE-SU-2016:1059
          https://chromium-review.googlesource.com/334448
            http://googlechromereleases.blogspot.com/2016/03/stable-channel-update_24.html
              http://www.zerodayinitiative.com/advisories/ZDI-16-224
                DSA-3531
                  1035423
                    openSUSE-SU-2016:0930
                      USN-2955-1
                        GLSA-201605-02

                            1. Configuration 1

                              cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*

                              Configuration 2

                              cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*
                              cpe:2.3:o:canonical:ubuntu_linux:15.10:*:*:*:*:*:*:*
                              cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*

                              Configuration 3

                              cpe:2.3:o:opensuse:opensuse:13.1:*:*:*:*:*:*:*

                              Configuration 4

                              cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*
                              End including
                              49.0.2623.95
                          VKontakte|Telegram|YouTube|Forum|GitHub|Bugzilla
                          Version: v24.5.3
                          Back to top