Mozilla: Texture upload into an unbound backing buffer resulted in an out-of-bound read

The Mozilla Foundation Security Advisory describes this issue as: A texture upload of a Pixel Buffer Object could have confused the WebGL code to skip binding the buffer used to unpack it, resulting in memory corruption and a potentially exploitable information leak or crash...

Mozilla: Texture upload into an unbound backing buffer resulted in an out-of-bound read

The Mozilla Foundation Security Advisory describes this issue as: A texture upload of a Pixel Buffer Object could have confused the WebGL code to skip binding the buffer used to unpack it, resulting in memory corruption and a potentially exploitable information leak or crash...

Mozilla: Texture upload into an unbound backing buffer resulted in an out-of-bound read

The Mozilla Foundation Security Advisory describes this issue as: A texture upload of a Pixel Buffer Object could have confused the WebGL code to skip binding the buffer used to unpack it, resulting in memory corruption and a potentially exploitable information leak or crash...

wuffs:pixel_swizzler_fuzzer: Crash in wuffs_base__pixel_swizzler__bgr__bgra_premul__src

Project: https://github.com/google/wuffs.git Detailed Report: https://oss-fuzz.com/testcase?key=4904615649869824 Project: wuffs Fuzzing Engine: libFuzzer Fuzz Target: pixelswizzlerfuzzer Job Type: libfuzzerasani386wuffs Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0xf6a04000 Crash...

Denial Of Service (DoS)

firefox is vulnerable to denial of service DoS. The vulnerability exists through a texture upload of a Pixel Buffer Object could have confused the WebGL code to skip binding the buffer used to unpack it, resulting in memory corruption and a potentially exploitable information leak or crash...

UBUNTU-CVE-2021-23981

A texture upload of a Pixel Buffer Object could have confused the WebGL code to skip binding the buffer used to unpack it, resulting in memory corruption and a potentially exploitable information leak or crash. This vulnerability affects Firefox ESR 78.9, Firefox 87, and Thunderbird 78.9...

Mozilla Firefox 缓冲区错误漏洞

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. Mozilla Firefox suffers from an out-of-bounds read vulnerability. An attacker can exploit this vulnerability by uploading a pixel buffer object to cause memory corruption and an information leak or cra...

DEBIAN-CVE-2020-36278

Leptonica before 1.80.0 allows a heap-based buffer over-read in findNextBorderPixel in ccbord.c...

CVE-2020-36278

Leptonica before 1.80.0 allows a heap-based buffer over-read in findNextBorderPixel in ccbord.c...

PT-2021-4617 · Leptonica +1 · Leptonica +1

Name of the Vulnerable Software and Affected Versions: Leptonica versions prior to 1.80.0 Description: The issue is related to a heap-based buffer over-read in the findNextBorderPixel function in ccbord.c. This can potentially allow a remote attacker to cause a denial of service. Recommendations:...

Google Android 缓冲区错误漏洞

Google Android is a Linux-based open source operating system from the USGoogleOpen Handheld Alliance Google. Google Android/Pixel suffers from a security vulnerability that may allow out-of-bounds writes due to a lack of boundary checking...

Google Android 安全漏洞

Google Android is a Linux-based open source operating system from the USGoogleOpen Handheld Alliance Google. A security vulnerability exists in Google Android/Pixel, which stems from a logic error in the NXP NFC firmware that could allow for an insecure firmware update. This could result in the...

Google Android 安全漏洞

Google Android is a Linux-based open source operating system from the USGoogleOpen Handheld Alliance Google. A security vulnerability exists in Google Android/Pixel that stems from an insecure PendingIntent in createSaveNotification of RecordingService.java that could bypass permissions. This cou...

Google Android 安全漏洞

Google Android is a Linux-based open source operating system from the USGoogleOpen Handheld Alliance Google. A security vulnerability exists in Google Android/Pixel, which can be exploited by an attacker to cause the disclosure of local information with required system execution privileges...

Google Android 安全漏洞

Google Android is a Linux-based open source operating system from the USGoogleOpen Handheld Alliance Google. A security vulnerability exists in Google Android/Pixel, which stems from a null variable PendingIntent in createEmergencyLocationUserNotification of GnssVisibilityControl.java, which may...

Google Android 缓冲区错误漏洞

Google Android is a Linux-based open source operating system from the USGoogleOpen Handheld Alliance Google. A security vulnerability exists in Google Android/Pixel that stems from an integer overflow in the FingerTipS touchscreen driver that may be out of range. This could result in the disclosu...

Google Android 安全漏洞

Google Android is a Linux-based open source operating system from the US Google Open Handheld Consortium Google. Google Android/Pixel suffers from a security vulnerability that may read out of bounds due to a lack of boundary checking...

Google Android 安全漏洞

Google Android is a Linux-based open source operating system from the USGoogleOpen Handheld Alliance Google. There is a security vulnerability in Google Android/Pixel, there is no information about this vulnerability yet, please stay tuned to CNNVD or the manufacturer's announcement...

Pixel Update Bulletin—March 2021Stay organized with collectionsSave and categorize content based on your preferences.

The Pixel Update Bulletin contains details of security vulnerabilities and functional improvements affecting supported Pixel devices Google devices. For Google devices, security patch levels of 2021-03-05 or later address all issues in this bulletin and all issues in the March 2021 Android Securi...

Pixel Update Bulletin—February 2021Stay organized with collectionsSave and categorize content based on your preferences.

The Pixel Update Bulletin contains details of security vulnerabilities and functional improvements affecting supported Pixel devices Google devices. For Google devices, security patch levels of 2021-02-05 or later address all issues in this bulletin and all issues in the February 2021 Android...