Christoph Diehl

A heap buffer overflow in the ANGLE library of Google Chrome allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This issue is related to the exploitation of heap buffer overflow, which can lead to arbitrary code execution. The severity of this issue is classified as High by Chromium security.

O problema está relacionado a uma implementação inadequada no WebGL, que é uma API de gráficos 3D. Isso poderia permitir que um invasor remoto explorasse potencialmente uma corrupção de heap por meio de uma página HTML maliciosa, levando possivelmente à execução de código arbitrário.

The issue is related to a memory safety bug that can be exploited by a remote attacker to access sensitive data, compromise data integrity, and cause a denial of service. The bug is associated with the lack of input size validation, allowing for potential memory corruption. It is presumed that with sufficient effort, some of these bugs could have been exploited to run arbitrary code.

The issue is related to a buffer overflow in memory, which can be exploited by a remote attacker using a specially crafted web page. This could potentially allow the execution of arbitrary code or cause a denial of service. The estimated number of potentially affected devices worldwide is not specified. There is evidence of memory corruption, and it is presumed that some of these bugs could be exploited with enough effort.

The issue is related to memory safety bugs, including evidence of memory corruption, which could potentially be exploited to run arbitrary code. This is due to a buffer overflow in memory, allowing a remote attacker to cause a denial of service or execute arbitrary code using a specially crafted web page.

The issue is caused by memory safety bugs, including evidence of memory corruption, which could potentially be exploited to run arbitrary code with enough effort. This affects various versions of Firefox, Firefox ESR, and Thunderbird.

The issue is caused by memory safety bugs, including buffer overflow in memory, which can lead to memory corruption. It is presumed that with sufficient effort, some of these bugs could be exploited to run arbitrary code. This can be achieved by a remote attacker using a specially crafted web page.

The issue is related to memory safety bugs, including evidence of memory corruption, which could potentially be exploited to run arbitrary code. This is due to a buffer overflow in memory, allowing a remote attacker to execute arbitrary code.

The issue is related to memory safety bugs, including evidence of memory corruption, which could potentially be exploited to run arbitrary code. This is due to a buffer overflow in memory, allowing a remote attacker to execute arbitrary code.

Memory safety bugs were reported, showing evidence of memory corruption. It is presumed that with enough effort, some of these bugs could be exploited to run arbitrary code.

The issue affects the browser engine, allowing remote attackers to cause a denial of service, which may result in memory corruption and application crash, or possibly execute arbitrary code via unknown vectors.

The issue is related to the UnacceleratedImageBufferSurface class in the Blink component, which mishandles the initialization mode. This allows remote attackers to obtain sensitive information from process memory via a crafted web site.

The issue allows remote attackers to cause a denial of service, resulting in memory corruption and application crash, or possibly execute arbitrary code via unknown vectors.

The issue allows remote attackers to cause a denial of service, resulting in memory corruption and application crash, or possibly execute arbitrary code via unknown vectors.

The issue allows remote attackers to execute arbitrary code or cause a denial of service due to memory corruption. This is related to the `Silf::readClassMap` and `Pass::readPass` functions.

The Inter-process Communication (IPC) implementation does not properly validate messages, which has unspecified impact and attack vectors.

The issue is related to the WebGL implementation, which does not properly restrict write operations. This allows remote attackers to execute arbitrary code or cause a denial of service, resulting in an application crash, via unspecified vectors.

A heap-based buffer overflow issue exists, allowing remote attackers to execute arbitrary code via a document containing a crafted embedded OpenType font.

The issue allows remote attackers to execute arbitrary code or cause a denial of service, resulting in memory corruption and application crash, via a document containing a crafted embedded font.

The issue is related to multiple buffer overflows in Apple Type Services (ATS) that allow remote attackers to execute arbitrary code. This can be achieved by using a document containing a crafted embedded TrueType font.