Hjy79425575

A vulnerability was reported that could allow a local attacker to escalate privileges.

The issue is related to an inappropriate implementation in the Downloads component, which could allow a remote attacker to obfuscate security UI via a malicious file. This could potentially lead to the disclosure of protected information or cause a denial of service. The severity of this issue is classified as Medium by Chromium.

The NVIDIA nvJPEG2000 Library contains a vulnerability due to improper input validation, which could allow an attacker to use a specially crafted input file. A successful exploit might lead to a partial denial of service.

The issue may lead to disclosure of user information when parsing a file. It was addressed with improved checks.

The issue is a stack-based buffer overflow in cuobjdump. An unprivileged remote attacker could exploit this condition by persuading a local user to download a specially crafted corrupted file and execute cuobjdump against it locally. This may lead to a limited denial of service and some loss of data integrity for the local user.

The issue is related to insufficient policy enforcement in the Safe Browsing service, which can be exploited by a remote attacker to bypass downloads protection policy. This can be achieved through a specially crafted HTML page, potentially allowing the attacker to disclose protected information.

An out-of-bounds read issue was addressed with improved bounds checking. This issue may lead to unexpected application termination or arbitrary code execution when opening a maliciously crafted file.

An out-of-bounds read issue was addressed with improved bounds checking. This issue may lead to unexpected application termination or arbitrary code execution when opening a maliciously crafted file.

An out-of-bounds read issue was addressed with improved bounds checking. This issue may lead to unexpected application termination or arbitrary code execution when opening a maliciously crafted file.

An out-of-bounds read issue was addressed with improved bounds checking. This issue may lead to unexpected application termination or arbitrary code execution when opening a maliciously crafted file.

An out-of-bounds read issue was addressed with improved bounds checking. This issue may lead to unexpected application termination or arbitrary code execution when opening a maliciously crafted file.

An out-of-bounds read issue was addressed with improved bounds checking. Opening a maliciously crafted file may lead to unexpected application termination or arbitrary code execution.

An out-of-bounds read issue was addressed with improved bounds checking. This issue may lead to unexpected application termination or arbitrary code execution when opening a maliciously crafted file.

An out-of-bounds read issue was addressed with improved bounds checking. This issue may lead to unexpected application termination or arbitrary code execution when opening a maliciously crafted file.

The issue is related to a memory corruption problem due to a buffer overflow in the ImageIO component. This can be exploited by processing a maliciously crafted image, potentially leading to arbitrary code execution in the target system. The estimated number of potentially affected devices worldwide is not specified.

A local attacker may be able to cause unexpected application termination or arbitrary code execution due to an issue that was addressed with improved checks.

An out-of-bounds read issue was addressed with improved bounds checking. Processing a maliciously crafted AppleScript binary may result in unexpected application termination or disclosure of process memory.

An out-of-bounds read issue was addressed with improved bounds checking. Processing a maliciously crafted AppleScript binary may result in unexpected application termination or disclosure of process memory.

An information disclosure issue was addressed by removing the vulnerable code. Opening a maliciously crafted file may lead to unexpected application termination or arbitrary code execution.

A stack overflow issue was addressed with improved input validation. Processing a maliciously crafted font file may lead to arbitrary code execution.