Alexey Kulaev

**Name of the Vulnerable Software and Affected Versions** FreeBSD versions 13.0-STABLE before n245050 FreeBSD versions 12.2-STABLE before r369525 FreeBSD versions 13.0-RC4 before p0 FreeBSD versions 12.2-RELEASE before p6 **Description** The issue arises from listening socket accept filters implementing the accf create callback, which incorrectly free a process-supplied argument string. This can lead to a double free or use after free when additional operations are performed on the socket. **Recommendations** For FreeBSD versions 13.0-STABLE before n245050, update to a version after n245050. For FreeBSD versions 12.2-STABLE before r369525, update to a version after r369525. For FreeBSD versions 13.0-RC4 before p0, update to a version after p0. For FreeBSD versions 12.2-RELEASE before p6, update to a version after p6.

**Name of the Vulnerable Software and Affected Versions** Google Chrome versions prior to 78.0.3904.87 **Description** The issue is related to a use after free in WebAudio, allowing a remote attacker to potentially exploit heap corruption via a crafted HTML page. This could impact the confidentiality, integrity, and availability of protected information. The vulnerability has been exploited in real-world attacks. **Recommendations** For Google Chrome versions prior to 78.0.3904.87, update to version 78.0.3904.87 or later to resolve the issue. As a temporary workaround, consider restricting access to WebAudio components until the update is applied.