Byoungyoung Lee

باحث منGeorgia Tech Information Security Center (GTISC)

#24072من 60,401

12.1إجمالي CVSS

الثغرات · 2

متوسطة

1

عالية

1

The issue is related to the ReverbConvolverStage function in the Web Audio implementation in Blink. It allows remote attackers to cause a denial of service due to an out-of-bounds read via vectors related to the `impulseResponse` array.

A denial of service issue exists due to improper handling of URLs in memory when URL-based Quality of Service (QoS) is enabled. This allows remote attackers to cause a denial of service (reboot) via a crafted URL to a web server. An attacker who successfully exploits this issue could cause the target system to stop responding and automatically restart.