ASB-A-147664838

In FastKeyAccumulator::GetKeysSlow of keys.cc, there is a possible out of bounds write due to type confusion. This could lead to remote code execution when processing a proxy configuration with no additional execution privileges needed. User interaction is not needed for exploitation...

PT-2019-13469

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 73.0.3683.103 Description The issue is related to an out of bounds memory access in JavaScript, potentially allowing a remote attacker to exploit heap corruption via a crafted HTML page. This could lead to remot...

Chrome V8 - Runtime_RegExpReplace Integer Overflow

Chrome V8 - RuntimeRegExpReplace Integer Overflow / Here's a snippet of the method. ASSIGNRETURNFAILUREONEXCEPTION isolate, captureslengthobj, Object::ToLengthisolate, captureslengthobj; const int captureslength = PositiveNumberToUint32captureslengthobj; ... if functionalreplace const int argc =...