CVE-2018-6038

Removed by vendor...

CVE-2018-6034

Removed by vendor...

CVE-2018-6047

Removed by vendor...

CVE-2018-6038: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap buffer overflow in WebGL in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page...

CVE-2018-6034: Out-of-bounds Read

Insufficient data validation in WebGL in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page...

CVE-2018-6047: Improper Input Validation

Insufficient policy enforcement in WebGL in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to potentially leak user redirect URL via a crafted HTML page...

Google Chrome < 61.0.3163.79 Multiple Vulnerabilities

Binary data 700345.pasl...

Mozilla Firefox < 57 Multiple Vulnerabilities

Binary data 700322.prm...

Mozilla Firefox ESR < 52.5 Multiple Vulnerabilities

Binary data 700332.prm...

chromium-browser: Heap buffer overflow in WebGL

Improper deserialization in WebGL in Google Chrome on Mac prior to 68.0.3440.75 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

Security update for Chromium (important)

This update for Chromium to version 68.0.3440.75 fixes multiple issues. Security issues fixed boo1102530: - CVE-2018-6153: Stack buffer overflow in Skia - CVE-2018-6154: Heap buffer overflow in WebGL - CVE-2018-6155: Use after free in WebRTC - CVE-2018-6156: Heap buffer overflow in WebRTC -...

Drawing Outside the Box: Precision Issues in Graphic Libraries

By Mark Brand and Ivan Fratric, Google Project Zero In this blog post, we are going to write about a seldom seen vulnerability class that typically affects graphic libraries though it can also occur in other types of software. The root cause of such issues is using limited precision arithmetic in...

CVE-2018-6162

Improper deserialization in WebGL in Google Chrome on Mac prior to 68.0.3440.75 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

CVE-2018-6154

Insufficient data validation in WebGL in Google Chrome prior to 68.0.3440.75 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

Google Chrome heap buffer overflow vulnerability (CNVD-2018-17049)

Google Chrome is a web browser developed by the American company Google Google. A heap buffer overflow vulnerability exists in WebGL in Google Chrome. An attacker can exploit the vulnerability to execute arbitrary code in the browser context...

PT-2018-3283

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 68.0.3440.75 Description The issue is related to insufficient data validation in WebGL, which can lead to heap corruption. A remote attacker can potentially exploit this by using a crafted HTML page. This may...

PT-2018-3290

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 68.0.3440.75 Description The issue is related to improper deserialization in the WebGL component of Google Chrome, which can be exploited by a remote attacker using a crafted HTML page. This can potentially lead...

Stable Channel Update for Desktop

The Chrome team is delighted to announce the promotion of Chrome 68 to the stable channel for Windows, Mac and Linux. This will roll out over the coming days/weeks. Chrome 68.0.3440.75 contains a number of fixes and improvements -- a list of changes is available in the log. Watch out for upcoming...

Google Chrome - Swiftshader Texture Allocation Integer Overflow

Google Chrome - Swiftshader Texture Allocation Integer Overflow There's a remotely triggerable memory corruption issue in SwiftShader that's reachable from WebGL, resulting from an integer overflow issue. In the GPU process there is validation on the sizes passed to texture creation functions to...

Google Chrome - Swiftshader Texture Allocation Integer Overflow

There's a remotely triggerable memory corruption issue in SwiftShader that's reachable from WebGL, resulting from an integer overflow issue. In the GPU process there is validation on the sizes passed to texture creation functions to ensure that they shouldn't cause overflow. However, in the...