Integer overflow in pacprocessor's libpac-chromium can lead to RCE, with poc and exploit

In NewFixedDoubleArray of factory.cc, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation.