CVE-2011-1298

The CVE-2011-1298 entry describes an integer overflow in WebKit’s macOS WebCore::GraphicsContext::fillRect, affecting Google Chrome before Blink M11. Connected sources replicate the same root cause (integer overflow) within WebKit used by Chrome on macOS. The NVD entry confirms the vulnerability ...

PT-2019-6620

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to Blink M11 Description An Integer Overflow issue exists in the WebCore::GraphicsContext::fillRect function of WebKit in Google Chrome. Recommendations For versions prior to Blink M11, update to a version that...

CVE-2011-1298: Integer Overflow or Wraparound

An Integer Overflow exists in WebKit in Google Chrome before Blink M11 in the macOS WebCore::GraphicsContext::fillRect function...

Apple Safari FloatingObjects Memory Misreference Vulnerability

Safari is a web browser developed by Apple and built into macOS and OS X. It is also the default browser built into iOS. A security vulnerability exists in the handling of GraphicsContext objects in Apple Safari. The vulnerability stems from a failure to validate the existence of an object before...

Apple Safari FloatingObjects Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Apple Safari. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of...

Apple Safari GraphicsContext Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Apple Safari. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the GraphicsContext...

WebKit - WebCore::SVGPatternElement::collectPatternAttributes Out-of-Bounds Read Exploit

Exploit for multiple platform in category dos / poc / Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1350 There is an out-of-bounds read security vulnerability in WebKit. The vulnerability was confirmed on ASan build of WebKit nightly. PoC:...

(Pwn2Own) Apple Safari GraphicsContext Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Apple Safari. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of...