EIP-2026-103651
PRE-CVESkia - Incorrect Convexity Assumptions Leading to Buffer Overflows
Title source: legacyExploitation Summary
EIP tracks 1 public exploit for EIP-2026-103651. PoCs published by Google Security Research.
AI-analyzed exploit summary This PoC demonstrates a stack out-of-bounds write in Skia due to incorrect convexity attribute handling after affine transformations, leading to memory corruption. The exploit leverages precision errors in RRect generation and transformation to trigger the vulnerability.
Description
Skia - Incorrect Convexity Assumptions Leading to Buffer Overflows
Exploits (1)
This PoC demonstrates a stack out-of-bounds write in Skia due to incorrect convexity attribute handling after affine transformations, leading to memory corruption. The exploit leverages precision errors in RRect generation and transformation to trigger the vulnerability.