P1Umer

The issue is related to incorrect handling of WASM register values. Exploitation of this issue could allow a remote attacker to execute arbitrary code. The problem arises when invalid data is passed, potentially leading to the creation of invalid WASM values, such as converting arbitrary integers into pointer values.

A memory corruption issue was addressed with improved input validation. Processing maliciously crafted web content may lead to an unexpected process crash.

تتعلق المشكلة بإدارة الذاكرة المحسّنة وقد تؤدي إلى حدوث حالة «رفض الخدمة» عند معالجة محتوى الويب. وترتبط هذه المشكلة بتخصيص موارد غير محدود، وهو ما يمكن أن يستغله مهاجم عن بُعد للتسبب في حالة «رفض الخدمة».

A type checking bug could lead to invalid code being compiled, potentially allowing a remote attacker to cause a denial of service using a specially crafted website. The issue is related to type confusion errors in Firefox and Firefox ESR, which can be exploited by a remote attacker. In the case of Mozilla Thunderbird, the vulnerability is associated with a type confusion error when processing HTML content, allowing an attacker to trick a victim into opening a specially crafted website, causing a browser crash.

A buffer overflow issue was addressed with improved memory handling. Processing maliciously crafted web content may lead to arbitrary code execution. The issue is related to the WebKitGTK and WPE WebKit modules, which can allow a remote attacker to access confidential data, compromise its integrity, and cause a denial of service.

The issue is related to an out-of-bounds write problem, which can be exploited by a remote attacker to access confidential data, compromise data integrity, and cause a denial of service. Processing maliciously crafted web content may lead to arbitrary code execution.

A memory corruption issue was addressed with improved state management. Processing maliciously crafted web content may lead to arbitrary code execution.

A logic issue was addressed with improved state management, which could allow a user to be tracked through their IP address.

A memory corruption issue was addressed with improved validation. Processing maliciously crafted web content may lead to arbitrary code execution. The issue is related to a buffer overflow in WPE WebKit and WebKitGTK modules, which can be exploited by a remote attacker to access confidential data, compromise data integrity, and cause a denial of service.

The issue is related to an out-of-bounds read in the Vim text editor, specifically in the `gchar cursor` function of the `misc1.c` component. This allows a remote attacker to access confidential data, compromise its integrity, and cause a denial of service.

The issue is related to a NULL pointer dereference error in the `vim regexec string()` function of the Vim text editor. Exploitation of this issue may allow an attacker to impact the confidentiality, integrity, and availability of protected information. The vulnerability can be exploited by a remote attacker who tricks the victim into opening a specially crafted file, potentially leading to a denial-of-service (DoS) attack.

The issue is related to an out-of-bounds read via the `fxUint8Getter` function at `/moddable/xs/sources/xsDataView.c`.

The issue is related to a buffer overflow in the njs value own enumerate() function of the njs interpreter in the Nginx server. This could allow a remote attacker to cause a denial of service. The function njs value own enumerate at src/njs value.c is specifically affected.

The issue is related to a segmentation violation in the `njs set number()` function, which can be caused by insufficient input data sanitization, leading to a buffer overflow. This can potentially allow a remote attacker to cause a denial of service.

The issue is related to a Use-after-free in the `njs function frame alloc()` function when it tries to invoke from a restored frame saved with `njs function frame save()`. This can allow a remote attacker to impact the confidentiality, integrity, and availability of information.

A control flow hijack was discovered in njs, caused by a Type Confusion vulnerability in the `njs promise perform then()` function. This issue affects njs used in NGINX.

The issue is related to memory corruption and can be exploited by processing maliciously crafted web content, potentially leading to arbitrary code execution. It is associated with a buffer overflow in the WebKit display module. Exploitation of this issue may allow a remote attacker to execute arbitrary code using a specially crafted web page.