Lucene search
+L

3 matches found

exploitpack
exploitpack
added 2019/02/06 12:0 a.m.37 views

Skia - Incorrect Convexity Assumptions Leading to Buffer Overflows

Skia - Incorrect Convexity Assumptions Leading to Buffer Overflows I was looking into the root cause of https://bugs.chromium.org/p/chromium/issues/detail?id=850350. In that bug, due to precision errors, Skia generated a concave RRect, but declared it convex. Later, the RRect was transformed with...

0.3AI score
SaveExploits0
Exploit DB
Exploit DB
added 2019/02/06 12:0 a.m.106 views

Skia - Incorrect Convexity Assumptions Leading to Buffer Overflows

I was looking into the root cause of https://bugs.chromium.org/p/chromium/issues/detail?id=850350. In that bug, due to precision errors, Skia generated a concave RRect, but declared it convex. Later, the RRect was transformed with an affine transform and used as a clipping region for drawing...

5.3AI score
SaveExploits0
ossfuzz
ossfuzz
added 2018/09/26 3:49 p.m.14 views

skia/region_set_path: Crash in SkRgnBuilder::blitH

Project: https://skia.googlesource.com/skia.git Detailed report: https://oss-fuzz.com/testcase?key=5687858401116160 Project: skia Fuzzer: libFuzzerskiaregionsetpath Fuzz target binary: regionsetpath Job Type: libfuzzermsanskia Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address:...

6.8AI score
SaveExploits0Affected Software1
Rows per page
Query Builder