0.957 High
EPSS
Percentile
99.4%
Incorrect alias information in IonMonkey JIT compiler for Array.prototype.slice method may lead to missing bounds check and a buffer overflow.
Incorrect handling of proto mutations may lead to type confusion in IonMonkey JIT code and can be leveraged for arbitrary memory read and write.
CPE | Name | Operator | Version |
---|---|---|---|
firefox esr | lt | 60.6.1 |
0.957 High
EPSS
Percentile
99.4%