polkit < 0.113 - Memory Corruption and Denial of Service via JavaScript Rule Evaluation
PolicyKit (aka polkit) before 0.113 allows local users to cause a denial of service (memory corruption and polkitd daemon crash) and possibly gain privileges via unspecified vectors, related to "javascript rule evaluation."