Heap-based buffer overflow in the ByteArray::Get method in data/byte_array.cc in Google sfntly before 2016-06-10, as used in Google Chrome before 52.0.2743.82, allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted SFNT font.
{ "availability": "No subscription required", "ubuntu_priority": "medium", "binaries": [ { "chromium-chromedriver": "52.0.2743.116-0ubuntu0.14.04.1.1134", "chromium-codecs-ffmpeg-extra-dbgsym": "52.0.2743.116-0ubuntu0.14.04.1.1134", "chromium-browser-dbgsym": "52.0.2743.116-0ubuntu0.14.04.1.1134", "chromium-codecs-ffmpeg": "52.0.2743.116-0ubuntu0.14.04.1.1134", "chromium-chromedriver-dbgsym": "52.0.2743.116-0ubuntu0.14.04.1.1134", "chromium-browser": "52.0.2743.116-0ubuntu0.14.04.1.1134", "chromium-codecs-ffmpeg-dbgsym": "52.0.2743.116-0ubuntu0.14.04.1.1134", "chromium-browser-l10n": "52.0.2743.116-0ubuntu0.14.04.1.1134", "chromium-codecs-ffmpeg-extra": "52.0.2743.116-0ubuntu0.14.04.1.1134" } ] }
{ "availability": "No subscription required", "ubuntu_priority": "medium", "binaries": [ { "chromium-chromedriver": "52.0.2743.116-0ubuntu0.16.04.1.1250", "chromium-codecs-ffmpeg-extra-dbgsym": "52.0.2743.116-0ubuntu0.16.04.1.1250", "chromium-browser-dbgsym": "52.0.2743.116-0ubuntu0.16.04.1.1250", "chromium-codecs-ffmpeg": "52.0.2743.116-0ubuntu0.16.04.1.1250", "chromium-chromedriver-dbgsym": "52.0.2743.116-0ubuntu0.16.04.1.1250", "chromium-browser": "52.0.2743.116-0ubuntu0.16.04.1.1250", "chromium-codecs-ffmpeg-dbgsym": "52.0.2743.116-0ubuntu0.16.04.1.1250", "chromium-browser-l10n": "52.0.2743.116-0ubuntu0.16.04.1.1250", "chromium-codecs-ffmpeg-extra": "52.0.2743.116-0ubuntu0.16.04.1.1250" } ] }