Arni Hardarson

A use after free issue in the XML component allows a remote attacker to execute arbitrary code within the sandbox by inducing the user to visit a specially crafted HTML page. Use after free is a memory corruption flaw that occurs when an application continues to use a pointer after it has been freed.

Incorrect authorization in Core allows a remote attacker to bypass the web origin policy, which is a security mechanism that restricts how a document or script loaded from one origin can interact with a resource from another origin, by using a crafted HTML page.

Improper state validation in XML allows a remote attacker to bypass the web origin policy, which is a security mechanism that restricts how a document or script loaded from one origin can interact with a resource from another origin, by using a crafted HTML page.

Improper resource exposure in the Object Request Broker (ORB), a component that manages communication between different software objects, allows a remote attacker to bypass site isolation by using a specially crafted HTML page.

An out of bounds read exists in ANGLE, which allows a remote attacker to read memory outside the sandbox by using a crafted HTML page. ANGLE (Almost Native Graphics Layer Engine) is a compatibility layer that allows WebGL content to run on various graphics APIs.

A use after free issue exists in the Input component. This occurs when a program continues to use a pointer after it has been freed, which can lead to memory corruption. A remote attacker can exploit this by inducing a user to open a crafted HTML page, allowing the execution of arbitrary code within the sandbox.

Improper input validation in SVG allows a remote attacker to potentially execute arbitrary code inside the sandbox by using a crafted HTML page.

Improper input validation in SVG allows a remote attacker to potentially execute arbitrary code inside the sandbox by using a crafted HTML page.

An integer overflow occurs due to insufficient input validation. Processing a maliciously crafted file can cause the application to terminate unexpectedly. An integer overflow is a condition where an arithmetic operation attempts to create a numeric value that is outside of the range that can be represented with a given number of digits.

An out-of-bounds write issue occurs when processing a maliciously crafted image, which may lead to unexpected app termination. An out-of-bounds write is a condition where the program writes data past the end of the intended buffer, potentially corrupting memory.

An application may be able to break out of its sandbox, which is a security mechanism used to isolate running applications from the rest of the system.

An uninitialized resource in WebGPU allows a remote attacker to obtain cross-origin data by using a crafted HTML page. WebGPU is a modern API that provides high-performance graphics and compute capabilities to web applications.

A use-after-free issue, which occurs when a program continues to use a pointer after it has been freed, was addressed with improved memory management. Processing maliciously crafted web content may lead to an unexpected process crash.

Processing maliciously crafted web content may result in the disclosure of process memory due to improper memory handling.

An app may be able to access private information due to a flaw in state management.

Processing a maliciously crafted image may corrupt process memory. This issue has been exploited in real-world incidents.