Heap-based Buffer Overflow

Overview Affected versions of this package are vulnerable to Heap-based Buffer Overflow via micols/rowsfullresoln settings. An attacker can achieve heap corruption by sending a specially crafted sequence of user gestures through Chromium, which implements this library. Remediation Upgrade...

PT-2025-32960 · Google +2 · Google Chrome +2

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 139.0.7258.127 Description: A heap buffer overflow exists in libaom, a component of Google Chrome. This issue could allow a remote attacker to potentially exploit heap corruption through a curated set of...

SUSE CVE-2024-8907

Insufficient data validation in Omnibox in Google Chrome on Android prior to 129.0.6668.58 allowed a remote attacker who convinced a user to engage in specific UI gestures to inject arbitrary scripts or HTML XSS via a crafted set of UI gestures. Chromium security severity: Medium...