Skia vulnerabilities

Skia, as used in Google Chrome before version 50.0.2661.94, allows remote attackers to bypass the Same Origin Policy and obtain sensitive information.

A vulnerability in Skia allows remote attackers to cause a denial of service by exploiting the SkRegion::setPath function.

In Skia, used in Google Chrome before version 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux, the return values of ChopMonoAtY calls are not properly validated. This may allow remote attackers to cause a denial of service through uninitialized memory access and application crash.

Skia, as used in Google Chrome before version 51.0.2704.63, mishandles coincidence runs, allowing remote attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via crafted curves.

Skia, as used in Android before 5.1.1 LMY48Z and 6.0 before December 1, 2015, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file.

Skia, as used in Android before version 5.1.1 LMY48T, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file.

In Skia, used in Google Chrome before version 44.0.2403.89, there is a vulnerability that allows remote attackers to cause a denial of service (memory corruption) by leveraging access to a renderer process and providing crafted serialized data.

Skia in Google Chrome before version 40.0.2214.91 allows remote attackers to cause a denial of service (buffer over-read) or possibly have unspecified other impact via crafted data that is improperly handled during text drawing.

Buffer overflow in Skia, as used in Google Chrome before version 39.0.2171.65, allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.

The ConvolveHorizontally function in Skia, used in Mozilla Firefox before version 31.0, Firefox ESR 24.x before 24.7, and Thunderbird before 24.7, does not properly handle the discarding of image data during function execution. This allows remote attackers to execute arbitrary code by triggering prolonged image scaling.

A use-after-free vulnerability in Skia in Google Chrome prior to 150.0.7871.46 allows a remote attacker to potentially perform a sandbox escape via a crafted HTML page.

An integer overflow in Skia in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.

Insufficient validation of untrusted input in Skia in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. The vulnerability has a critical severity rating according to Chromium.

A vulnerability in the Skia library in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. (Chromium security severity: Medium)

A Use-After-Free vulnerability in the Skia library in Google Chrome prior to 150.0.7871.125 allows a remote attacker who has compromised the renderer process to potentially escape the sandbox via a crafted HTML page. The issue is rated as High severity in the Chromium security assessment.

An uninitialized use vulnerability in the Skia library in Google Chrome prior to 150.0.7871.125 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.

Insufficient validation of untrusted input in Skia in Google Chrome prior to 150.0.7871.46 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.

A heap buffer overflow vulnerability in Skia in Google Chrome prior to 150.0.7871.46 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. The issue has a critical severity rating according to Chromium.

Insufficient validation of untrusted input in Skia in Google Chrome prior to 150.0.7871.46 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page.

An inappropriate implementation in the Skia library in Google Chrome prior to 150.0.7871.46 allowed a remote attacker who had compromised the renderer process to perform UI spoofing via a crafted HTML page. The issue is rated as low severity.

An integer overflow in Skia in Google Chrome prior to 150.0.7871.46 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.

An uninitialized use vulnerability in Skia in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page.

A use-after-free vulnerability in Skia in Google Chrome on Android prior to 150.0.7871.47 allows a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.

An integer overflow in Skia in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.

An out-of-bounds read vulnerability in the Skia library in Google Chrome on Mac prior to version 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page.

An integer overflow in Skia in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.

A type confusion vulnerability in the Skia library in Google Chrome prior to version 148.0.7778.216 allows a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. The issue has a high security severity (Chromium security severity: High).

A use-after-free vulnerability was found in Skia in Google Chrome prior to 148.0.7778.216. A remote attacker could potentially exploit heap corruption via a crafted HTML page.

An integer overflow in Skia in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to execute arbitrary code inside a sandbox via a crafted HTML page.

A Use-After-Free vulnerability in the Skia library in Google Chrome prior to 148.0.7778.216 allows a remote attacker who has compromised the renderer process to potentially escape the sandbox via a crafted HTML page. The issue is rated as Critical severity by Chromium.

Inappropriate implementation in Skia in Google Chrome on Android prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. The vulnerability has a critical severity rating.

Insufficient validation of untrusted input in Skia in Google Chrome on Android prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.

A Use-After-Free vulnerability in the Skia library in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.

An inappropriate implementation in the Skia library in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. The issue is rated as high severity.

An integer overflow in Skia in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to execute arbitrary code inside a sandbox via a crafted HTML page.

An integer overflow in Skia in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. The vulnerability has a Chromium security severity of High.