HIGHCVSS 8.8

CVE-2016-1669

CVE-2016-1669 updated by NVD

Modified: 2026-09-20
Sources: nvd

Summary

The Zone::New function in zone.cc in Google V8 before 5.0.71.47, as used in Google Chrome before 50.0.2661.102, does not properly determine when to expand certain memory allocations, which allows remote attackers to cause a denial of service (buffer overflow) or possibly have unspecified other impact via crafted JavaScript code.

Affected packages

Ecosystem	Package	Affected versions	Fixed versions
Node.js	node.js	[object Object], [object Object], [object Object], [object Object], [object Object], [object Object]	—

References

https://nvd.nist.gov/vuln/detail/CVE-2016-1669

Includes data from the National Vulnerability Database (NIST). NVD data is in the public domain; this page is not endorsed by NIST.

CVE® is a registered trademark of The MITRE Corporation. CVE content reproduced under the CVE Terms of Use; copyright designation © MITRE.