Out-of-Bounds-Read

firefox is vulnerable to Out-of-Bounds-Read. The vulnerability is due to incorrect optimization of switch statements by the JIT Just-In-Time compiler. It results in code with out-of-bounds-reads in certain code patterns involving switch statements...

PT-2024-3492

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 125 Description The issue is related to an out-of-memory condition during object initialization, which could result in an empty shape list. If the Just-In-Time JIT compiler subsequently traced the object, it would...

PT-2024-3569

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 125 Description The issue is related to a buffer overflow in the js::CheckTracedThing function of the Mozilla Firefox JIT compiler. This can be exploited by a remote attacker to cause a denial of service. The...

PT-2024-3490

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 125 Firefox ESR versions prior to 115.10 Thunderbird versions prior to 115.10 Description The issue is related to the JIT compiler incorrectly optimizing switch statements, resulting in out-of-bounds reads. This can...

PT-2024-2357

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 124.0.1 Description The issue is related to an out-of-bounds read or write on a JavaScript object by fooling range-based bounds check elimination. This can allow an attacker to read outside the expected values or...

php:php-fuzz-function-jit: Segv on unknown address in ZEND_HANDLE_EXCEPTION_SPEC_HANDLER

Detailed Report: https://oss-fuzz.com/testcase?key=5308354391834624 Project: php Fuzzing Engine: libFuzzer Fuzz Target: php-fuzz-function-jit Job Type: libfuzzerasanphp Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: ZENDHANDLEEXCEPTIONSPECHANDLER zero zendexecu...

php:php-fuzz-tracing-jit: Crash in make_fcontext

Detailed Report: https://oss-fuzz.com/testcase?key=5515265011744768 Project: php Fuzzing Engine: honggfuzz Fuzz Target: php-fuzz-tracing-jit Job Type: honggfuzzasanphp Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0x788ed4100fe8 Crash State: makefcontext zimFiberstart executeinterna...

Fedora: Security Advisory for pypy (FEDORA-2023-c43a940a93)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 37 Update: pypy-7.3.12-3.fc37

PyPy's implementation of Python, featuring a Just-In-Time compiler on some CPU architectures, and various optimized implementations of the standard types strings, dictionaries, etc This build of PyPy has JIT-compilation enabled...

Fedora: Security Advisory for pypy (FEDORA-2023-129178fd27)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora: Security Advisory for pypy (FEDORA-2023-acdfd145f2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 37 Update: pypy3.8-7.3.11-2.3.8.fc37

PyPy's implementation of Python 3.8, featuring a Just-In-Time compiler on some CPU architectures, and various optimized implementations of the standard types strings, dictionaries, etc.. This build of PyPy has JIT-compilation enabled...

KLA48551 Multiple vulnerabilities in Mozilla Firefox

Multiple vulnerabilities were found in Mozilla Firefox. Malicious users can exploit these vulnerabilities to cause denial of service, execute arbitrary code, obtain sensitive information, spoof user interface. Below is a complete list of vulnerabilities: 1. Denial of service vulnerability in JIT...

[SECURITY] Fedora 36 Update: pypy3.9-7.3.11-1.3.9.fc36

PyPy's implementation of Python 3.9, featuring a Just-In-Time compiler on some CPU architectures, and various optimized implementations of the standard types strings, dictionaries, etc.. This build of PyPy has JIT-compilation enabled...

[SECURITY] Fedora 37 Update: pypy3.9-7.3.11-1.3.9.fc37

PyPy's implementation of Python 3.9, featuring a Just-In-Time compiler on some CPU architectures, and various optimized implementations of the standard types strings, dictionaries, etc.. This build of PyPy has JIT-compilation enabled...

Fedora: Security Advisory for pypy3.8 (FEDORA-2023-78b4ce2f23)

The remote host is missing an update for the Copyright C 2023 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Fedora: Security Advisory for pypy3.8 (FEDORA-2022-20116fb6aa)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

[SECURITY] Fedora 37 Update: pypy3.9-7.3.9-4.3.9.fc37

PyPy's implementation of Python 3.9, featuring a Just-In-Time compiler on some CPU architectures, and various optimized implementations of the standard types strings, dictionaries, etc.. This build of PyPy has JIT-compilation enabled...

[SECURITY] Fedora 36 Update: pypy3.7-7.3.9-4.3.7.fc36

PyPy's implementation of Python 3.7, featuring a Just-In-Time compiler on some CPU architectures, and various optimized implementations of the standard types strings, dictionaries, etc.. This build of PyPy has JIT-compilation enabled...

Fedora: Security Advisory for pypy3.9 (FEDORA-2022-61d8e8d880)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...