Integer overflow in the kbasep_vinstr_attach_client function in midgard/mali_kbase_vinstr.c in Google Chrome before 52.0.2743.85 allows remote attackers to cause a denial of service (heap-based buffer overflow and use-after-free) by leveraging an unrestricted multiplication.
Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5138
Reference (s):
- BID:92139
- URL: http://www.securityfocus.com/bid/92139
- http://googlechromereleases.blogspot.com/2016/07/stable-channel-update-for-chrome-os_26.html
- https://bugs.chromium.org/p/chromium/issues/detail?id=631752&desc=2
- GENTOO:GLSA-201610-09