115 matches found
CVE-2022-2008
Double free in WebGL in Google Chrome prior to 102.0.5005.115 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...
Mozilla: Heap buffer overflow in WebGL
The Mozilla Foundation Security Advisory describes this flaw as: A malicious webpage could have caused an out-of-bounds write in WebGL, leading to memory corruption and a potentially exploitable crash...
Mozilla: Heap buffer overflow in WebGL
The Mozilla Foundation Security Advisory describes this flaw as: A malicious webpage could have caused an out-of-bounds write in WebGL, leading to memory corruption and a potentially exploitable crash...
Mozilla: Heap buffer overflow in WebGL
The Mozilla Foundation Security Advisory describes this flaw as: A malicious webpage could have caused an out-of-bounds write in WebGL, leading to memory corruption and a potentially exploitable crash...
The vulnerability of Google Chrome’s WebGL component, which allows a hacker to trigger a service failure
The vulnerability of Google Chrome’s WebGL component is related to the use of memory after it is freed. Exploiting this vulnerability can allow a malicious actor to cause a service failure through a specially created HTML page...
The vulnerability of the WebGL component in the Thunderbird email client, as well as in browsers like Firefox and Firefox ESR, allows attackers to execute arbitrary code.
The vulnerability of the WebGL component in the Thunderbird email client, as well as in browsers like Firefox and Firefox ESR, is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...
Mozilla: Out of bound write due to lazy initialization
A WebGL framebuffer was not initialized early enough, resulting in memory corruption and an out of bound write. This vulnerability affects Firefox ESR 78.10, Thunderbird 78.10, and Firefox 88...
Mozilla: Heap buffer overflow in WebGL
The Mozilla Foundation Security Advisory describes this flaw as: Certain blit values provided by the user were not properly constrained leading to a heap buffer overflow on some video drivers...
Mozilla: Heap buffer overflow in WebGL
The Mozilla Foundation Security Advisory describes this flaw as: Certain blit values provided by the user were not properly constrained leading to a heap buffer overflow on some video drivers...
Mozilla: Heap buffer overflow in WebGL
The Mozilla Foundation Security Advisory describes this flaw as: Certain blit values provided by the user were not properly constrained leading to a heap buffer overflow on some video drivers...
Mozilla Firefox 缓冲区错误漏洞
Mozilla Firefox is an open source web browser. A heap buffer overflow vulnerability exists in Mozilla Firefox WebGL, which can be exploited by a remote attacker to submit a specially crafted WEB request that can be tricked into being parsed by the user, which can cause the application to crash or...
DEBIAN-CVE-2020-6555
Out of bounds read in WebGL in Google Chrome prior to 84.0.4147.125 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page...
chromium-browser: Out of bounds read in WebGL
Out of bounds read in WebGL in Google Chrome prior to 84.0.4147.125 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page...
Google Chrome ANGLE Resource Management Error Vulnerability
Google Chrome is a web browser from Google.Almost Native Graphics Layer Engine ANGLE is a graphics layer engine that allows Windows users to run WebGL and other OpenGL ES 2.0 content by translating the OpenGL ES 2.0 API to DirectX 9 or DirectX 11 API calls. DirectX 11 API calls to run WebGL and...
Mozilla: Uninitialized memory could be read when using the WebGL copyTexSubImage method
The Mozilla Foundation Security Advisory describes this flaw as: When reading from areas partially or fully outside the source resource with WebGL's copyTexSubImage method, the specification requires the returned values be zero. Previously, this memory was uninitialized, leading to potentially...
Mozilla: Uninitialized memory could be read when using the WebGL copyTexSubImage method
The Mozilla Foundation Security Advisory describes this flaw as: When reading from areas partially or fully outside the source resource with WebGL's copyTexSubImage method, the specification requires the returned values be zero. Previously, this memory was uninitialized, leading to potentially...
UBUNTU-CVE-2019-11693
The bufferdata function in WebGL is vulnerable to a buffer overflow with specific graphics drivers on Linux. This could result in malicious content freezing a tab or triggering a potentially exploitable crash. Note: this issue only occurs on Linux. Other operating systems are unaffected.. This...
chromium-browser: Heap buffer overflow in WebGL
Insufficient data validation in WebGL in Google Chrome prior to 68.0.3440.75 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...
Google Chrome heap buffer overflow vulnerability (CNVD-2018-17041)
Google Chrome is a web browser developed by the American company Google Google. A heap buffer overflow vulnerability exists in WebGL in Google Chrome. An attacker can exploit the vulnerability to execute arbitrary code in the browser context...
GPU memory module security bypass vulnerability
A GPU Graphics Processing Unit memory module is a GPU memory module. A security vulnerability exists in the GPU memory module. An attacker can exploit this vulnerability to bypass security restrictions and perform unauthorized operations by using the JavaScript WebGL API...