Iain Ireland

A missing type check during unboxed objects removal can result in a crash and potentially be exploited to run arbitrary code. The issue is related to a lack of authentication data verification mechanism in the unpacking module of the affected browsers and email client. This could allow a remote attacker to access confidential data, compromise its integrity, and cause a denial of service.

The issue is related to memory safety bugs, including evidence of memory corruption, which could potentially be exploited to run arbitrary code. This could allow a remote attacker to access confidential data, compromise its integrity, and cause a denial of service. The estimated number of potentially affected devices worldwide is not specified.