Choongwoo Han

O problema está relacionado a uma vulnerabilidade do tipo “use after free” no componente de navegação do Google Chrome, o que poderia permitir que um invasor remoto que tivesse comprometido o processo de renderização potencialmente escapasse da sandbox por meio de uma página HTML maliciosa. Isso pode afetar a confidencialidade, a integridade e a disponibilidade das informações protegidas.

A stack-based buffer over-read in the ComputeResizeImage function in the MagickCore/accelerate.c file allows a remote attacker to cause a denial of service, resulting in an application crash, via a maliciously crafted pict file.

The issue is related to a memory leak in the ReadDCMImage function. This function is located in coders/dcm.c. The memory leak occurs because the `redmap`, `greenmap`, and `bluemap` variables can be overwritten by new pointers, causing the previous pointers to be lost. This allows remote attackers to cause a denial of service.

The issue is related to the LoadBuffer implementation in Google V8, which mishandles data types. This can be exploited by remote attackers using crafted JavaScript code, potentially leading to a denial of service or other unspecified impacts due to an out-of-bounds write operation. The issue is related to the files compiler/pipeline.cc and compiler/simplified-lowering.cc.