An integer overflow in Skia in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.

An integer overflow in Skia in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.

Security update for Chromium

chromium-browser: incorrect permissions on shared memory chromium-browser: use-after-free in blink chromium-browser: race condition in v8 chromium-browser: heap buffer overflow in skia chromium-browser: incorrect permissions on shared memory chromium-browser: type confusion in v8 chromium-browser: integer overflow in v8 chromium-browser: same origin bypass via canvas chromium-browser: buffer overflow in skia chromium-browser: stack buffer overflow in skia chromium-browser: csp bypass through extensions chromium-browser: heap bufffer overflow in skia chromium-browser: integer overflow in pdfium chromium-browser: heap bufffer overflow in webgl chromium-browser: mark-of-the-web bypass chromium-browser: overly permissive cross origin downloads chromium-browser: incorrect handling of url fragment identifiers in blink chromium-browser: timing attack using svg filters chromium-browser: url spoof in omnibox chromium-browser: information disclosure via texture data in webgl chromium-browser: information disclosure in ipc call chromium-browser: xss in interstitials chromium-browser: circumvention of port blocking chromium-browser: incorrect processing of appmanifests

Affected: Ubuntu:14.04:LTS: chromium-browser, Ubuntu:16.04:LTS: chromium-browser, Ubuntu:16.04:LTS: oxide-qt

An integer overflow in Skia in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.