CVE-2016-1614: Google Chrome

Medium severity, CVSS 4.3. EPSS: 1% chance of exploitation in the next 30 days.

The UnacceleratedImageBufferSurface class in WebKit/Source/platform/graphics/UnacceleratedImageBufferSurface.cpp in Blink, as used in Google Chrome before 48.0.2564.82, mishandles the initialization mode, which allows remote attackers to obtain sensitive information from process memory via a crafted web site.

Affected products

• Google Chrome: up to and including 47.0.2526.106

Published 2016-01-25. Last modified 2026-06-17.