An out-of-bounds read in V8 in Google Chrome prior to 57.0.2987.133 for Linux Windows and Mac and 57.0.2987.132 for Android allowed a remote attacker to obtain heap memory contents via a crafted HTML page.