Gengming Liu

O problema está relacionado à validação insuficiente de dados no mecanismo JavaScript V8 do Google Chrome, o que pode levar à corrupção da pilha (heap). Um invasor remoto poderia explorar essa vulnerabilidade para obter acesso a informações confidenciais ou causar uma negação de serviço (DoS) por meio de uma página HTML maliciosa.

The issue is related to a use-after-free in Bluetooth, allowing a remote attacker to execute arbitrary code via a crafted HTML page. This could potentially lead to unauthorized access to protected information, compromising its integrity and availability.

The issue is related to an out of bounds write in JavaScript, which can be exploited by a remote attacker using a specially crafted HTML page. This could allow the attacker to execute arbitrary code inside a sandbox, potentially leading to unauthorized access to protected information and disruption of its integrity and availability.

The issue is related to a use after free in permissions, allowing a remote attacker who has compromised the renderer process to potentially perform a sandbox escape. This can be achieved via a crafted HTML page, potentially impacting the confidentiality, integrity, and availability of protected information.