Revskills

تتعلق المشكلة بثغرة «use-after-free» في Skia، مما يتيح لمهاجم عن بُعد استغلال تلف الـ«heap» عبر صفحة HTML مصممة خصيصًا لهذا الغرض. تشمل التفاصيل الفنية الوصول المتزامن إلى `SkFontationsScalerContext`، مما قد يؤدي إلى حالة التنافس و«استخدام بعد التحرير». يمكن استدعاء الدالة `generateYScalePathForGlyphId()` من SkDrawable COLRv1.

The issue is related to a use-after-free problem in the WebKit component, which can be exploited by a remote attacker to execute arbitrary code using a specially crafted link. Processing web content may lead to arbitrary code execution. The estimated number of potentially affected devices worldwide is not specified.

The issue is related to an out of bounds memory access in the CSS component of Google Chrome, allowing a remote attacker to perform an out of bounds memory read via a crafted HTML page. This could potentially impact the confidentiality, integrity, and availability of protected information.

The issue is caused by a buffer overflow in the WebKit component, allowing a remote attacker to execute arbitrary code. Processing web content may lead to arbitrary code execution. The issue was addressed with improved memory handling.

The issue is related to a buffer overflow in memory, which may allow a remote attacker to execute arbitrary code when processing web content. Improved memory handling has been implemented to address this issue.

A use after free issue was addressed with improved memory management. Processing maliciously crafted web content may lead to arbitrary code execution. The issue is related to the use of memory after it has been freed when handling web content, which can be exploited by a remote attacker to execute arbitrary code.

The issue is related to a use-after-free flaw in the nsDocShell destructor, which can be triggered under certain conditions. This can lead to a race condition, causing the use-after-free. There have been targeted attacks in the wild exploiting this flaw. The exploitation of this issue may allow a remote attacker to access confidential data, compromise data integrity, and cause a denial of service.

The issue is related to a use-after-free condition in the ReadableStream component, potentially allowing a remote attacker to access confidential data, compromise its integrity, and cause a denial of service. There have been targeted attacks in the wild exploiting this flaw.