> it cannot be read by exploiting a buffer overflow What does the attack that does this actually look like? Lastpass reads text off an html page and decides wh

> it cannot be read by exploiting a buffer overflow What does the attack that does this actually look like? Lastpass reads text off an html page and decides when to inject auto-fill prompts and/or enter in a password. Is it possible for a buffer overflow to be exploited there, that lets an attacker (who controls the site) gain access to a password for a different site? How does that work? Is there some other attack possible here? Ie: is it possible another user-space application can read passwords from memory used by the password manager? How does another app know it's a password? How does it trigger a buffer overflow? (I'm ignoring apps running with kernel or privileged access: that seems like game over)