An out-of-bounds read in V8 in Google Chrome prior to 57.0.2987.133 for Linux Windows and Mac and 57.0.2987.132 for Android allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page related to Array.prototype.indexOf.