CVE-2016-1637

CVE-2016-1637 describes an information disclosure vulnerability in the SkATan2_255 function within Skia, specifically affecting Google Chrome versions prior to 49.0.2623.75. This flaw stems from improper arctangent calculations, allowing remote attackers to potentially obtain sensitive information through a specially crafted website. Rated as Medium severity (CVSS 6.5), exploitation requires user interaction (UI:R) but has low attack complexity (AC:L) over a network (AV:N), leading to a high confidentiality impact (C:H). There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or inclusion in CISA's KEV catalog, though it has received some community discussion and media coverage.