The Web Animations implementation in Blink, as used in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux, improperly relies on list iteration, which allows remote attackers to cause a denial of service (use-after-destruction) or possibly have unspecified other impact via a crafted web site.
Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5153
Reference (s):
- BID:92717
- URL: http://www.securityfocus.com/bid/92717
- https://codereview.chromium.org/2188623006
- https://codereview.chromium.org/2189813002/
- https://crbug.com/631052