Yan Kang

The issue involves improved memory handling. Processing web content may lead to a denial-of-service.

The issue was addressed with improved memory handling. Processing maliciously crafted web content may lead to memory corruption.

Processing maliciously crafted web content can lead to memory corruption due to improper memory handling. This issue manifests as a buffer overflow, which may allow a remote attacker to cause a denial of service. This flaw is confirmed to be under active exploitation in the wild.

The issue involves improved memory handling. Processing maliciously crafted web content may lead to memory corruption.

A potential NULL pointer dereference issue was found in the Linux kernel, specifically in the etas es58x driver. The driver incorrectly assumed that `es58x dev->udev->serial` could never be NULL. However, an attacker could potentially spoof the device identity by providing a NULL USB serial number, triggering a NULL pointer dereference. The issue was resolved by adding a check on `es58x dev->udev->serial` before accessing it.

A use-after-free issue was found in the Linux kernel, specifically in the corsair-void module, due to a missing call to cancel delayed work sync(). This caused a problem when the corsair void remove() function was called.

The issue was addressed with improved checks. Processing maliciously crafted web content may lead to arbitrary code execution.

A memory consumption issue was addressed with improved memory handling. Processing maliciously crafted web content may lead to arbitrary code execution. The issue is related to a buffer overflow vulnerability in WebKitGTK and WPE WebKit modules, which can allow a remote attacker to access confidential data, compromise data integrity, and cause a denial of service.