CVE-2018-6116

Published: Dec 4, 2018Modified: Jun 17, 2026

6.5

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Exploitability: 2.8 / Impact: 3.6

Source: NVD

Description

A nullptr dereference in WebAssembly in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page.

Affected (6)

Products: Google: Chrome · Redhat: Linux Desktop, Linux Server, Linux Workstation · Debian: Debian Linux

1 product

3 products

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Google Chrome	Before 66.0.3359.117

Configuration B

3 vulnerable

Vulnerable Software	Affected Versions
Redhat Linux Desktop	Version 6.0
Redhat Linux Server	Version 6.0
Redhat Linux Workstation	Version 6.0

Configuration C

2 vulnerable

Vulnerable Software	Affected Versions
Debian Debian Linux	Version 8.0
Debian Debian Linux	Version 9.0

Related CWEs

CWE-476

NULL Pointer Dereference

The product dereferences a pointer that it expects to be valid but is NULL.