The Zone::New function in zone.cc in Google V8 before 5.0.71.47, as used in Google Chrome before 50.0.2661.102, does not properly determine when to expand certain memory allocations, which allows remote attackers to cause a denial of service (buffer overflow) or possibly have unspecified other impact via crafted JavaScript code.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade chromium | Aug 30, 2017 | May 14, 2016 |
| Debian | — | Upgrade nodejs | Jun 1, 2016 | May 14, 2016 |
| Freebsd | — | Upgrade chromium-pulseUpgrade chromium-npapi | Dec 10, 2025 | May 28, 2016 |
| Gentoo Linux | — | Upgrade www-client/chromium. | Oct 30, 2017 | May 14, 2016 |
| Google Chrome | — | Upgrade to the latest version of Google Chrome | May 19, 2016 | May 11, 2016 |
| Suse | — | Upgrade nodejs4-develUpgrade npm4Upgrade chromiumUpgrade nodejs4Upgrade nodejs4-docs | May 17, 2016 | May 14, 2016 |
| Ubuntu | — | Upgrade liboxideqtcore0 | May 19, 2016 | May 14, 2016 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub