Chrome offline_items_collection::OfflineContentAggregator::OnItemRemoved Heap Buffer Overflow

Chrome suffers from a heap buffer overflow vulnerability in offline_items_collection::OfflineContentAggregator::OnItemRemoved.