cvedb.io
CVE-2016-5138
HIGH · CVSS 8.8
EPSS exploitation probability: 0%
Published 2016-08-01T02:59:16.807 · Last modified 2026-06-17T00:48:49.603

Summary

Integer overflow in the kbasep_vinstr_attach_client function in midgard/mali_kbase_vinstr.c in Google Chrome before 52.0.2743.85 allows remote attackers to cause a denial of service (heap-based buffer overflow and use-after-free) by leveraging an unrestricted multiplication.

Affected products

google — chrome

Does this affect you?

Add your gear to cvedb and we'll alert you only when google ships something exploited.

Check my exposure →

References

This product uses data from the NVD API but is not endorsed or certified by the NVD. Informational only; not professional security advice.