Related Vulnerabilities: CVE-2019-9799  

Insufficient bounds checking of data during inter-process communication in Firefox before 66.0 might allow a compromised content process to be able to read memory from the parent process under certain conditions.

Severity High

Remote Yes

Type Information disclosure

Description

Insufficient bounds checking of data during inter-process communication in Firefox before 66.0 might allow a compromised content process to be able to read memory from the parent process under certain conditions.

AVG-925 firefox 65.0.2-1 66.0-1 Critical Fixed

https://www.mozilla.org/en-US/security/advisories/mfsa2019-07/#CVE-2019-9799
https://bugzilla.mozilla.org/show_bug.cgi?id=1505678