CVE-2018-16083

chromium-browser: An out of bounds read in forward error correction code in WebRTC in Google Chrome prior to 69.0.3497.81 allowed a rem...

CVE-2018-16083 is fixed in 5 products on 1 platform, first by chromium-browser 69.0.3497.81-0ubuntu0.18.04.1, released June 27, 2019. It is not reported as exploited. Patch Radar priority: Routine.

Routine
CVSS
n/a
Medium
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0526
92nd percentile

An out of bounds read in forward error correction code in WebRTC in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.

Where it's fixed

ProductFixed inFixReleased
Linux
chromium-browser · Ubuntu 18.04.6 LTS (bionic) 69.0.3497.81-0ubuntu0.18.04.1 chromium-browser 69.0.3497.81-0ubuntu0.18.04.1 Jun 27, 2019
chromium-browser-l10n · Ubuntu 18.04.6 LTS (bionic) 69.0.3497.81-0ubuntu0.18.04.1 chromium-browser-l10n 69.0.3497.81-0ubuntu0.18.04.1 Jun 27, 2019
chromium-chromedriver · Ubuntu 18.04.6 LTS (bionic) 69.0.3497.81-0ubuntu0.18.04.1 chromium-chromedriver 69.0.3497.81-0ubuntu0.18.04.1 Jun 27, 2019
chromium-codecs-ffmpeg · Ubuntu 18.04.6 LTS (bionic) 69.0.3497.81-0ubuntu0.18.04.1 chromium-codecs-ffmpeg 69.0.3497.81-0ubuntu0.18.04.1 Jun 27, 2019
chromium-codecs-ffmpeg-extra · Ubuntu 18.04.6 LTS (bionic) 69.0.3497.81-0ubuntu0.18.04.1 chromium-codecs-ffmpeg-extra 69.0.3497.81-0ubuntu0.18.04.1 Jun 27, 2019