[Chrome ITW sandbox escape] Integer overflow in SkSLVMCodeGenerator (skia)

https://bugs.chromium.org/p/chromium/issues/detail?id=1432603

6 points · 4 comments · view on lemmy.world

4 Comments

helpmeplease@infosec.pub · 2 pts · 3y (3 replies)

The bug is from April 2023 and has been closed for more than 14 weeks. This case is really interesting by the way.

udunadan@infosec.pub · 1 pts · 3y (2 replies)

The issue had been made public only on July 25. The point of sharing the bug isn't notifying users to patch their browsers but to inform browser vulnerability researchers of a valuable data point.

helpmeplease@infosec.pub · 2 pts · 3y (1 reply)

It was a very interesting sharing and I thank you for it I didn't mean to sound mean, I just wanted to clarify something.

udunadan@infosec.pub · 2 pts · 3y

Absolutely no problem, happy if you liked it!