CVEs-PoC/2016/CVE-2016-1649.md

CVE-2016-1649

Description

The Program::getUniformInternal function in Program.cpp in libANGLE, as used in Google Chrome before 49.0.2623.108, does not properly handle a certain data-type mismatch, which allows remote attackers to cause a denial of service (buffer overflow) or possibly have unspecified other impact via crafted shader stages.

POC

Reference

No PoCs from references.

Github

• https://github.com/gmh5225/vulnjs
• https://github.com/wh1ant/vulnjs