Lack of correct bounds checking in Skia in Google Chrome prior to 73.0.3683.75 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.
- https://usn.ubuntu.com/3997-1/
No PoCs found on GitHub currently.