The convolution implementation in Skia as used in Google Chrome before 47.0.2526.73 does not properly constrain row lengths which allows remote attackers to cause a denial of service (out-of-bounds memory access) or possibly have unspecified other impact via crafted graphics data.