Ioanna Dimitriou

The issue is related to errors in cryptographic transformations and a race condition in notification code. This could allow a remote attacker to hide notifications for pages, potentially leading to spoofing attacks.

The issue is related to the incorrect recording of live pointers across wasm instance calls, leading to a garbage collection (GC) that does not trace these live pointers. This could result in a use-after-free, causing a potentially exploitable crash. The vulnerability can be exploited by a remote attacker using a specially crafted web page, potentially allowing the execution of arbitrary code.