Dana Keeler

Memory safety bugs involving memory corruption may allow an attacker to execute arbitrary code.

The issue arises from the use of an insecure MD5 hash to store web application manifests, allowing for a hash collision that could overwrite another application's manifest. This could be exploited to run arbitrary code in another application's context.

The issue is caused by memory safety bugs, including evidence of memory corruption, which could potentially be exploited to run arbitrary code. This is due to a buffer overflow in memory, allowing a remote attacker to execute arbitrary code.

The issue is caused by a heap-based buffer overflow in the ASN.1 decoder. This can be exploited by remote attackers using specially crafted OCTET STRING data, potentially leading to a denial of service or the execution of arbitrary code.

The issue allows user-assisted man-in-the-middle attackers to bypass intended access restrictions. This can be achieved by triggering a user dialog for an X.509 certificate problem, such as an expired certificate or a mismatched hostname for a domain with pinning enabled.

The issue affects the browser engine, allowing remote attackers to cause a denial of service, which results in memory corruption and application crash, or possibly execute arbitrary code via unknown vectors.