Skia as used in Google Chrome before 25.0.1364.97 on Windows and Linux and before 25.0.1364.99 on Mac OS X allows remote attackers to cause a denial of service (out-of-bounds read) via vectors related to a \user gesture check for dangerous file downloads.\