PT-2018-2575

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 72.0.3626.81 Description The issue is related to an incorrect Just-In-Time JIT compilation of GLSL shaders in the SwiftShader component of Google Chrome, which could allow a remote attacker to execute arbitrary...

Heap Feng Shader: Exploiting SwiftShader in Chrome

Posted by Mark Brand, Google Project Zero On the majority of systems, under normal conditions, SwiftShader will never be used by Chrome - it’s used as a fallback if you have a known-bad “blacklisted” graphics card or driver. However, Chrome can also decide at runtime that your graphics driver is...

Security update for chromium (moderate)

This update for Chromium to version 69.0.3497.92 fixes the following issues: Security issues fixed boo1108114: - Function signature mismatch in WebAssembly - URL Spoofing in Omnibox The following tracked packaging issues were fixed: - the chromium package incorrectly provied swiftshader resolvabl...

Security update for chromium (moderate)

This update for Chromium to version 69.0.3497.92 fixes the following issues: Security issues fixed boo1108114: - Function signature mismatch in WebAssembly - URL Spoofing in Omnibox The following tracked packaging issues were fixed: - the chromium package incorrectly provied swiftshader resolvabl...

chromium-browser: Out of bounds read in SwiftShader

Unintended floating-point error accumulation in SwiftShader in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to leak cross-origin data via a crafted HTML page...

chromium-browser: Stack buffer overflow in SwiftShader

An out of bounds read in Swiftshader in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page...

Debian DSA-4289-1 : chromium-browser - security update

Several vulnerabilities have been discovered in the chromium web browser. - CVE-2018-16065 Brendon Tiszka discovered an out-of-bounds write issue in the v8 JavaScript library. - CVE-2018-16066 cloudfuzzer discovered an out-of-bounds read issue in blink/webkit. - CVE-2018-16067 Zhe Jin discovered ...

Google Chrome SwiftShader Out-of-Bounds Read Vulnerability

Google Chrome is the United States Google Google company developed a Web browser. SwiftShader is one of the open source 3D rendering tool. An out-of-bounds read vulnerability exists in SwiftShader in versions of Google Chrome prior to 69.0.3497.81. No details of the vulnerability are provided at...

Google Chrome SwiftShader Buffer Overflow Vulnerability

Google Chrome is the United States Google Google company developed a Web browser. SwiftShader is one of the open source 3D rendering tool. A stack buffer overflow vulnerability exists in SwiftShader in versions of Google Chrome prior to 69.0.3497.81, which can be exploited by an attacker to execu...

CVE-2018-16069

Unintended floating-point error accumulation in SwiftShader in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to leak cross-origin data via a crafted HTML page...

CVE-2018-16082

An out of bounds read in Swiftshader in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page...

PT-2018-3188

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 69.0.3497.81 Description The issue is caused by an unintended floating-point error accumulation in SwiftShader, allowing a remote attacker to leak cross-origin data via a crafted HTML page. This can be exploited...

PT-2018-3201

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 69.0.3497.81 Description The issue is caused by an out of bounds read in the Swiftshader library of Google Chrome, potentially allowing a remote attacker to perform out of bounds memory access. This could be...

chromium-browser: Integer overflow in SwiftShader

Integer overflows in Swiftshader in Google Chrome prior to 68.0.3440.75 potentially allowed a remote attacker to execute arbitrary code via a crafted HTML page...

FreeBSD : chromium -- multiple vulnerabilities (b9c525d9-9198-11e8-beba-080027ef1a23)

Google Chrome Releases reports : 42 security fixes in this release, including : - 850350 High CVE-2018-6153: Stack buffer overflow in Skia. Reported by Zhen Zhou of NSFOCUS Security Team on 2018-06-07 - 848914 High CVE-2018-6154: Heap buffer overflow in WebGL. Reported by Omair on 2018-06-01 -...

Security update for Chromium (important)

This update for Chromium to version 68.0.3440.75 fixes multiple issues. Security issues fixed boo1102530: - CVE-2018-6153: Stack buffer overflow in Skia - CVE-2018-6154: Heap buffer overflow in WebGL - CVE-2018-6155: Use after free in WebRTC - CVE-2018-6156: Heap buffer overflow in WebRTC -...

Drawing Outside the Box: Precision Issues in Graphic Libraries

By Mark Brand and Ivan Fratric, Google Project Zero In this blog post, we are going to write about a seldom seen vulnerability class that typically affects graphic libraries though it can also occur in other types of software. The root cause of such issues is using limited precision arithmetic in...

CVE-2018-6174

Integer overflows in Swiftshader in Google Chrome prior to 68.0.3440.75 potentially allowed a remote attacker to execute arbitrary code via a crafted HTML page...

Google Chrome integer overflow vulnerability (CNVD-2018-17186)

Google Chrome is the United States Google Google company developed a Web browser. SwiftShader is one of the open source 3D rendering tool. An integer overflow vulnerability exists in SwiftShader in versions of Google Chrome prior to 68.0.3440.75. A remote attacker can exploit this vulnerability t...

PT-2018-3268

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 68.0.3440.75 Description The issue is caused by integer overflows in the Swiftshader library of Google Chrome, potentially allowing a remote attacker to execute arbitrary code via a crafted HTML page. This could...