Remote Yes

Type Arbitrary code execution

Description

A buffer overflow and out-of-bounds read has been found in the TextureStorage11 function of the Angle library, as used in the chromium browser before 70.0.3538.67 and Firefox before 64.0.

AVG-833 firefox 63.0.3-1 64.0-1 Critical Fixed

AVG-781 chromium 69.0.3497.100-1 70.0.3538.67-1 Critical Fixed

12 Dec 2018 ASA-201812-9 AVG-833 firefox Critical multiple issues

17 Oct 2018 ASA-201810-12 AVG-781 chromium Critical multiple issues

https://chromereleases.googleblog.com/2018/10/stable-channel-update-for-desktop.html
https://bugs.chromium.org/p/chromium/issues/detail?id=880906
https://www.mozilla.org/en-US/security/advisories/mfsa2018-29/#CVE-2018-17466
https://bugzilla.mozilla.org/show_bug.cgi?id=1488295