Chrome Version       : 49.0.2623.110 m (with Hardware acceleration on)
URLs (if applicable) : http://shaka-player-demo.appspot.com/ with manifest from http://52.29.88.163:1935/live/ngrp:P7_all/manifest.mpd


What steps will reproduce the problem?
1 - Boot up windows 10 normally
2- Open Chrome, ensure that you have HW acceleration on (often default)
3- Go to http://shaka-player-demo.appspot.com/ ensure that you are on the http version not the https version for cross security zone access to the DASH manifest
4- Select a custom Test Manifest, and point it to: http://52.29.88.163:1935/live/ngrp:P7_all/manifest.mpd this manifest is provided for test purposes by Znipe Esports AB. The manifest and its DASH stream is generated by us and available for a limit of 50 concurrent connections, call or email for more details
5- Press “load stream” and look at the DASH stream
6- Either wait for approximately 30 sec or manually upgrade the bitrate to 2.5Mbit/s to observe the issue. If not seen withing 30 seconds - restart the procedure from step 2
7- Observe the issue - a potential uncontrolled buffer overflow occurs, below observation have been made:
7.a- In Resource Monitor - see how the “Committed Charged” memory goes from stable 3GB to 50Gb 
7.b- Windows warns about low memory
7.c- Windows suggest closing some apps to free memory
7.d- Blue Screen of Death
7.e- Blue screen with flickering characters


What is the expected result?
I expect a proper stream

What happens instead?
Committed memory goes from 3GB to 50GB and cause bluescreen or forced closing of random applications or complete freeze of chrome

Please provide any additional information below. Attach a screenshot if
possible.
- more information will follow. I will try to reduce the test vector for a quicker way to reproduce the issue
 

Deleted: VulnerabilityReport.pdf 148 KB

VulnerabilityReport.pdf 148 KB Download