Chrome IPCZ FragmentDescriptors are not validated allowing for an out-of-bounds crash condition. Continue reading...