Skia as used in Google Chrome before 51.0.2704.63 mishandles coincidence runs which allows remote attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via crafted curves related to SkOpCoincidence.cpp and SkPathOpsCommon.cpp.