6 matches found
uaf-2023-28205
CVE-2023-28205: Apple WebKit Use-After-Free 취약점 이 취약점은 Apple WebKit에 영향을 미치며, 악의적으로 조작된 웹 콘텐츠를 통해 WebKit 프로세스 컨텍스트에서 임의 코드 실행이 가능해질 수 있습니다. 이 리포지토리에서 분석된 영향받는 WebKit 빌드는 WebKit-613.1.17.1 PlayStation / Safari 15.4 계열을 기반으로 합니다. 설명 PoCProof of Concept는 구조화된 복제 작업 중 Map 및 Date와 같은 JavaScript 객체의 등록...
Design/Logic Flaw
The SerializedScriptValue::transferArrayBuffers function in WebKit/Source/bindings/core/v8/SerializedScriptValue.cpp in the V8 bindings in Blink, as used in Google Chrome before 50.0.2661.94, mishandles certain array-buffer data structures, which allows remote attackers to cause a denial of servi...
UBUNTU-CVE-2016-1663
The SerializedScriptValue::transferArrayBuffers function in WebKit/Source/bindings/core/v8/SerializedScriptValue.cpp in the V8 bindings in Blink, as used in Google Chrome before 50.0.2661.94, mishandles certain array-buffer data structures, which allows remote attackers to cause a denial of servi...
CVE-2014-3171
Use-after-free vulnerability in the V8 bindings in Blink, as used in Google Chrome before 37.0.2062.94, allows remote attackers to cause a denial of service or possibly have unspecified other impact by leveraging improper use of HashMap add operations instead of HashMap set operations, related to...
CVE-2014-3171
CVE-2014-3171 is a use-after-free in Chrome’s Blink V8 bindings (HashMap add vs set) that affects the rendering engine’s V8 integration. The issue resides in bindings/core/v8/DOMWrapperMap.h and bindings/core/v8/SerializedScriptValue.cpp and, if exploited, can lead to a denial of service; remedia...
