CVE-2016-5182 describes a heap corruption vulnerability in Google Chrome's Blink rendering engine, affecting versions prior to 54.0.2840.59 on Windows, Mac, and Linux, and 54.0.2840.85 on Android. This flaw stemmed from insufficient validation during bitmap handling. With a CVSS score of 8.8 (HIGH), a remote attacker could exploit this vulnerability with low complexity via crafted HTML pages, potentially leading to high impact on confidentiality, integrity, and availability. There is no evidence of active exploitation, nor are there publicly available exploit modules in Metasploit, Nuclei, or ExploitDB. Community discussion and media coverage for this CVE are minimal.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
<= 53.0.2785.143CPE matchmatch criteria | cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:* |
CVSS version used by this source: 3.0
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
No social media mentions found for this CVE.
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.2 Bluesky, 0.1 Mastodon, and 0.2 GitHub mentions.
The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.1 Security Researcher mentions.