Out-of-Bounds Read Vulnerability in Skia's SkRegion::readFromMemory Function

CVE-2016-1702 · MEDIUM Severity

AV:N/AC:M/AU:N/C:N/I:N/A:P

The SkRegion::readFromMemory function in core/SkRegion.cpp in Skia, as used in Google Chrome before 51.0.2704.79, does not validate the interval count, which allows remote attackers to cause a denial of service (out-of-bounds read) via crafted serialized data.

Learn more about our Cis Benchmark Audit For Google Chrome.