↧
A Chromium incorrect size calculation when deserializing Mojo "Event" messages can lead to out-of-bounds access.
94356d5538990c64e559c1b0258aa0c0