CVE-2016-5213 Use after free in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android
Remote attackers can execute arbitrary code via heap corruption in V8 by tricking users into visiting a crafted HTML page.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- Available
What is CVE-2016-5213?
CVE-2016-5213 is a high-severity use after free vulnerability in Google Chrome, published on 19 Jan 2017. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.
Official description
A use after free in V8 in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
Weakness: CWE-416
Which versions are affected by CVE-2016-5213?
It affects 1 product.
Products include Google Chrome.
How do I fix CVE-2016-5213?
Upgrade to a fixed version.
Upgrade to the fixed version. These bugs are found with fuzzing and sanitisers and avoided by memory-safe languages. More about Use after free.
Is CVE-2016-5213 being exploited?
There is no known exploitation of CVE-2016-5213 in the wild and no public exploit code.
Other vulnerabilities in Google Chrome
Sources
Also known as GHSA-x9j2-gmqc-gvp6, UBUNTU-CVE-2016-5213.