Описание
Out of bounds read in Skia in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially read memory inside the sandbox via a crafted media file. (Chromium security severity: Medium)
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| chromium | fixed | 152.0.7977.64-1 | package | |
| chromium | end-of-life | bullseye | package | |
| webkit2gtk | fixed | 2.54.0-1 | package | |
| webkit2gtk | end-of-life | bookworm | package | |
| webkit2gtk | end-of-life | bullseye | package | |
| wpewebkit | fixed | 2.54.0-1 | package | |
| wpewebkit | ignored | trixie | package | |
| wpewebkit | ignored | bookworm | package | |
| wpewebkit | end-of-life | bullseye | package |
Примечания
Not an issue in Skia, but Chromium's use of Skia
https://webkitgtk.org/security/WSA-2026-0006.html
EPSS
Связанные уязвимости
Out of bounds read in Skia in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially read memory inside the sandbox via a crafted media file. (Chromium security severity: Medium)
Out of bounds read in Skia in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially read memory inside the sandbox via a crafted media file. (Chromium security severity: Medium)
Out of bounds read in Skia in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially read memory inside the sandbox via a crafted media file. (Chromium security severity: Medium)
Out of bounds read in Skia in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially read memory inside the sandbox via a crafted media file. (Chromium security severity: Medium)
EPSS