Aki Helin

The issue is related to an object lifecycle problem in the ANGLE library, which can lead to heap corruption. A remote attacker could potentially exploit this issue via a crafted HTML page, allowing them to execute arbitrary code or cause a denial of service.

The issue is related to a use after free in Swiftshader, which can be exploited by a remote attacker to potentially cause heap corruption via a crafted HTML page. This could allow the attacker to execute arbitrary code or cause a denial of service.

The issue arises from a buffer overflow in the `BufferSubData` function due to incorrect handling of WebGL content. This can allow remote attackers to execute arbitrary code or cause a denial of service via specially crafted WebGL content.

The issue is related to the mozilla::AudioSink function mishandling inconsistent sample formats within MP3 audio data. This can be exploited by remote attackers via a malformed file, potentially leading to arbitrary code execution or a denial of service (out-of-bounds read). The vulnerability is also described as a buffer overflow.

The issue allows remote attackers to cause a denial of service (buffer over-read and application crash) or possibly execute arbitrary code via crafted H.264 video data in an m4v file.

The issue is related to a use-after-free vulnerability in the AppendElements function when the Fluendo MP3 plugin for GStreamer is used. This can be exploited by remote attackers via a crafted MP3 file, potentially leading to arbitrary code execution or a denial of service due to heap memory corruption.

The issue allows remote attackers to cause a denial of service, resulting in an application crash, by utilizing a crafted WAV file. This is due to improper handling by the `nsCString::CharAt` function.

The issue allows remote attackers to execute arbitrary code via vectors related to crafted IndexedDB data, specifically in the `mozilla::dom::indexedDB::IDBKeyRange::cycleCollection::Trace` function. This is a use-after-free vulnerability.

The issue allows remote attackers to execute arbitrary code or cause a denial of service, resulting in memory corruption and application crash, via a crafted web site.

The issue is related to a use-after-free vulnerability that can be exploited by remote attackers to cause a denial of service or possibly have other unspecified impacts. This is achieved through vectors related to error handling for Cascading Style Sheets (CSS) token-sequence data.

The issue is related to the improper parsing of SVG documents, which can be exploited by remote attackers to cause a denial of service through an out-of-bounds read. The estimated number of potentially affected devices and details about real-world incidents are not specified.

The issue allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service, resulting in memory corruption and application crash, via vectors related to iTunes Store browsing.

The issue allows remote attackers to execute arbitrary code or cause a denial of service via a (1) font-face or (2) use element in an SVG document. This can lead to an application crash.

The issue is related to an "API abuse issue" and allows remote attackers to execute arbitrary code or cause a denial of service via a crafted HTML document. This is due to the improper handling of libxml contexts.

The issue allows remote attackers to execute arbitrary code or cause a denial of service, resulting in memory corruption and application crash, via an SVG document with nested `use` elements.

The issue is related to an integer underflow in the unlzw function, which can be triggered by a crafted archive using LZW compression. This may lead to an array index error, causing a denial of service or potentially allowing the execution of arbitrary code. Multiple vulnerabilities in the ncompress package may compromise the confidentiality, integrity, and availability of protected information, and these vulnerabilities can be exploited remotely.