CVE-2016-1654 is a denial-of-service vulnerability in the media subsystem of Google Chrome versions prior to 50.0.2661.75, also affecting Canonical, Debian, OpenSUSE, and SUSE distributions. This medium-severity flaw (CVSS 6.5) allows remote attackers to trigger an invalid read operation through unspecified vectors, requiring user interaction. While no public exploits or Metasploit modules exist, the vulnerability has garnered minimal community discussion and limited media coverage, indicating low active exploitation.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
8.0CPE matchmatch criteria | cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:* | ||
42.1CPE matchmatch criteria | cpe:2.3:o:opensuse:leap:42.1:*:*:*:*:*:*:* | ||
12.0CPE matchmatch criteria | cpe:2.3:o:suse:linux_enterprise:12.0:*:*:*:*:*:*:* | ||
<= 49.0.2623.112CPE matchmatch criteria | cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:* | ||
14.04CPE matchmatch criteria | cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:* |
CVSS version used by this source: 3.0
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.