Using the Address Sanitizer tool, security researcher Atte Kettunen found a buffer overflow during the rendering of SVG format graphics with directional content. This is caused by a flaw in directional-isolate processing and results in a potentially exploitable crash.
CPE | Name | Operator | Version |
---|---|---|---|
firefox | lt | 48 | |
firefox esr | lt | 45.3 |