CVE-2015-6764

The BasicJsonStringifier::SerializeJSArray function in json-stringifier.h in the JSON stringifier in Google V8, as used in Google Chrome before 47.0.2526.73…

published December 6, 2015

CVSS
—
EPSS
6%
Percentile
93.0
In the wild
Unconfirmed
What it is

⚠️ A crafty crafted array can lead to chaos! The BasicJsonStringifier in Google V8 mishandles array elements, opening the door for remote attackers to cause a denial of service! 🔥 Think of it like a restaurant kitchen where the chefs misread the orders, leading to disastrous and chaotic meals being sent out — a recipe for disaster! An attacker can exploit this vulnerability to access out-of-bounds memory, resulting in a frustrating denial of service. It’s like a kitchen filled with chaos where no dish can be served, leaving users in the lurch and unable to access the service they need!

Put simply

Think of it like a restaurant kitchen where the chefs misread the orders, leading to disastrous and chaotic meals being sent out — a recipe for disaster! This vulnerability stems from the BasicJsonStringifier::SerializeJSArray function in json-stringifier.h, which improperly loads array elements, allowing for out-of-bounds memory access. As a result, crafted JavaScript code could disrupt normal operations.

What to do

An attacker can exploit this vulnerability to access out-of-bounds memory, resulting in a frustrating denial of service. It’s like a kitchen filled with chaos where no dish can be served, leaving users in the lurch and unable to access the service they need! To mitigate this issue, ensure you’re running Google Chrome version 47.0.2526.73 or later, where this flaw is fixed. Regularly update your browser to the latest version and monitor for any patches to stay protected! You've got this! Keeping your software updated is the key to a secure environment. 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.05726 · 93.0th percentile
Published
2015-12-06T01:00Z
EPSS history
Timeline
  • 06 DEC 01:00Z
    The BasicJsonStringifier::SerializeJSArray function in json-stringifier.h in the JSON stringifier in Google V8, as used in Google Chrome before 47.0.2526.73…
    cvelistv5