3004 matches found
CVE-2018-6034
CVE-2018-6034 originates from an integer overflow in Blink/WebGL leading to an out-of-bounds memory read in Google Chrome before version 64.0.3282.119. The Initial description states the vulnerability as an insufficient data validation in WebGL causing the out-of-bounds read via a crafted HTML pa...
CVE-2018-6038
Heap buffer overflow in WebGL in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page...
CVE-2018-6038
Heap buffer overflow in WebGL in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page...
CVE-2018-6047
Insufficient policy enforcement in WebGL in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to potentially leak user redirect URL via a crafted HTML page...
CVE-2018-6038
CVE-2018-6038 describes a heap buffer overflow in WebGL on Google Chrome, allowing a remote attacker to cause an out-of-bounds read via a crafted HTML page. Affected product: Google Chrome (WebGL component). Root cause: heap overflow in WebGL leading to memory corruption. Impact: information disc...
CVE-2018-6047
Google Chrome WebGL vulnerability CVE-2018-6047 involves insufficient policy enforcement in WebGL that could leak a user’s redirect URL via a crafted page. Affected product: Google Chrome (WebGL component). Root cause: policy enforcement issue in WebGL. Impact: potential information disclosure of...
CVE-2018-6047
Removed by vendor...
CVE-2018-6034
Removed by vendor...
CVE-2018-6038
Removed by vendor...
CVE-2018-6034
Insufficient data validation in WebGL in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page...
CVE-2018-6034: Out-of-bounds Read
Insufficient data validation in WebGL in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page...
CVE-2018-6047: Improper Input Validation
Insufficient policy enforcement in WebGL in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to potentially leak user redirect URL via a crafted HTML page...
CVE-2018-6038: Improper Restriction of Operations within the Bounds of a Memory Buffer
Heap buffer overflow in WebGL in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page...
Google Chrome < 61.0.3163.79 Multiple Vulnerabilities
Binary data 700345.pasl...
Mozilla Firefox ESR < 52.5 Multiple Vulnerabilities
Binary data 700332.prm...
Mozilla Firefox < 57 Multiple Vulnerabilities
Binary data 700322.prm...
chromium-browser: Heap buffer overflow in WebGL
Improper deserialization in WebGL in Google Chrome on Mac prior to 68.0.3440.75 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...
Security update for Chromium (important)
This update for Chromium to version 68.0.3440.75 fixes multiple issues. Security issues fixed boo1102530: - CVE-2018-6153: Stack buffer overflow in Skia - CVE-2018-6154: Heap buffer overflow in WebGL - CVE-2018-6155: Use after free in WebRTC - CVE-2018-6156: Heap buffer overflow in WebRTC -...
Drawing Outside the Box: Precision Issues in Graphic Libraries
By Mark Brand and Ivan Fratric, Google Project Zero In this blog post, we are going to write about a seldom seen vulnerability class that typically affects graphic libraries though it can also occur in other types of software. The root cause of such issues is using limited precision arithmetic in...
