Behzad Najjarpour Jabbari

Improved input validation was implemented to prevent a malicious website from exfiltrating data cross-origin. Cross-origin exfiltration occurs when a site accesses data from a different origin than the one that served the page, violating the Same-Origin Policy.

The issue is related to errors in memory object handling mechanisms in the Windows GDI component, allowing an attacker to disclose protected information using a specially crafted document file. It involves out-of-bounds read information disclosure, potentially affecting system security.

The issue is related to an information disclosure vulnerability in the Windows GDI component, which improperly discloses the contents of its memory. This can be exploited by attackers to obtain sensitive information using a specially crafted document. The vulnerability is associated with errors in the mechanisms for handling objects in memory.

The issue allows remote attackers to cause a denial of service, resulting in an invalid read of two bytes and application crash. This is due to mishandling of GPOS and GSUB tables, related to files such as `hb-ot-layout-gpos-table.hh`, `hb-ot-layout-gsub-table.hh`, and `hb-ot-layout-gsubgpos-private.hh`.

The issue is caused by errors in handling objects in memory by the Microsoft Graphics component in Windows operating systems. This can be exploited by a remote attacker using a specially crafted application to disclose protected information.

The issue is related to a buffer overflow operation in the Windows GDI component, which can be exploited to disclose protected information. This can be achieved through a specially crafted document or a specially formed web page. The estimated number of potentially affected devices worldwide is not available. There is no information about real-world incidents where this issue was exploited.

A remote code execution issue exists in the way the Windows Graphics Device Interface (GDI) handles objects in memory. This allows remote attackers to execute arbitrary code by exploiting the vulnerability, potentially through a specially crafted web page or document.

An out-of-bounds heap read issue was found in the jpc pi nextpcrl() function when processing crafted input.

The issue is related to an error within the `tar directory for file()` function in the gsf-infile-tar.c file, which can be exploited to trigger a Null pointer dereference, causing a crash when processing a crafted TAR file.