Byoungyoung Lee

Researcher fromGeorgia Tech Information Security Center (GTISC)

#24080of 60,399

12.1Total CVSS

Vulnerabilities · 2

Medium

1

High

1

The issue is related to the ReverbConvolverStage function in the Web Audio implementation in Blink. It allows remote attackers to cause a denial of service due to an out-of-bounds read via vectors related to the `impulseResponse` array.

A denial of service issue exists due to improper handling of URLs in memory when URL-based Quality of Service (QoS) is enabled. This allows remote attackers to cause a denial of service (reboot) via a crafted URL to a web server. An attacker who successfully exploits this issue could cause the target system to stop responding and automatically restart.