Numeric Overflow Vulnerability in Google Chrome Skia Component
CVE-2017-5063
8.8HIGH
Key Information:
- Vendor
Google
- Vendor
- CVE Published:
- 27 October 2017
What is CVE-2017-5063?
A numeric overflow vulnerability exists in the Skia component of Google Chrome prior to specific versions, allowing a remote attacker to exploit this weakness. By crafting a malicious HTML page, the attacker can trigger an out of bounds memory read, potentially leading to unauthorized access or manipulation of data. This issue affects multiple operating systems, including Linux, Windows, Mac, and Android, underscoring the importance of timely updates to mitigate such vulnerabilities.
Affected Version(s)
Google Chrome prior to 58.0.3029.81 for Linux, Windows and Mac, and 58.0.3029.83 for Android Google Chrome prior to 58.0.3029.81 for Linux, Windows and Mac, and 58.0.3029.83 for Android