CVE-2016-5202

browser/extensions/api/dial/dial_registry.cc in Google Chrome before 54.0.2840.98 on macOS, before 54.0.2840.99 on Windows, and before 54.0.2840.100 on Linux…

published October 25, 2019

CVSS
—
EPSS
1%
Percentile
55.6
In the wild
Unconfirmed
What it is

⚠️ A missing device ID copy in Chrome's DIAL registry can lead to data surprises during erase operations! It’s like throwing away a box of chocolates without checking for the one you wanted first. 🍫 Picture this: you're at a bakery about to toss a cake in the trash, but you forgot to check if your favorite slice was hidden inside. That's what happens here when a device ID isn't copied before the erase operation. This oversight means that when the erase function triggers, it may unintentionally access and destroy critical data instead of cleaning house as intended. You could lose essential device identifiers or settings, which could disrupt your browsing experience in unexpected ways!

Put simply

Picture this: you're at a bakery about to toss a cake in the trash, but you forgot to check if your favorite slice was hidden inside. That's what happens here when a device ID isn't copied before the erase operation. In Chrome before version 54.0.2840.98 on macOS, 54.0.2840.99 on Windows, and 54.0.2840.100 on Linux, the browser fails to copy the device ID before an erase() call, leading to unintentional data access during the erase process.

What to do

This oversight means that when the erase function triggers, it may unintentionally access and destroy critical data instead of cleaning house as intended. You could lose essential device identifiers or settings, which could disrupt your browsing experience in unexpected ways! To mitigate this issue, update Google Chrome to the latest version promptly. Ensure that you've installed version 54.0.2840.98 or newer on macOS, 54.0.2840.99 or newer on Windows, and 54.0.2840.100 or newer on Linux to eliminate this vulnerability. You've got this! Stay updated and secure, and your browsing will be smooth sailing! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00791 · 55.6th percentile
Published
2019-10-25T13:30Z
EPSS history
Timeline
  • 25 OCT 13:30Z
    browser/extensions/api/dial/dial_registry.cc in Google Chrome before 54.0.2840.98 on macOS, before 54.0.2840.99 on Windows, and before 54.0.2840.100 on Linux…
    cvelistv5