9.8
CVSSv3

CVE-2018-18504

Published: 05/02/2019 Updated: 07/02/2019
CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10
CVSS v3 Base Score: 9.8 | Impact Score: 5.9 | Exploitability Score: 3.9
VMScore: 668
Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Vulnerability Summary

A crash and out-of-bounds read can occur when the buffer of a texture client is freed while it is still in use during graphic operations. This results is a potentially exploitable crash and the possibility of reading from the memory of the freed buffers. This vulnerability affects Firefox < 65.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

mozilla firefox

canonical ubuntu linux 18.10

canonical ubuntu linux 18.04

canonical ubuntu linux 16.04

canonical ubuntu linux 14.04

Vendor Advisories

Firefox could be made to crash or run programs as your login if it opened a malicious website ...
Mozilla Foundation Security Advisory 2019-01 Security vulnerabilities fixed in Firefox 65 Announced January 29, 2019 Impact critical Products Firefox Fixed in Firefox 65 ...
A memory corruption and out-of-bounds read have been found in Firefox &lt; 650, that can occur when the buffer of a texture client is freed while it is still in use during graphic operations This results in a potentially exploitable crash and the possibility of reading from the memory of the freed buffers ...