The vulnerability of the Firefox browser, which allows a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability in the mozilla::dom::OscillatorNodeEngine::ComputeCustom subsystem of Web Audio in Mozilla Firefox allows malicious actors operating remotely to execute arbitrary code or cause service failures such as out-of-bounds reading, memory corruption, and unexpected application...

The vulnerability of the Firefox browser, which allows a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information.

Overfilling the buffer in the Speex decoder of the Web Audio subsystem in Mozilla Firefox allows malicious actors to execute arbitrary code using specially crafted AudioBuffer channel counters and decoding frequencies...

The vulnerability of Thunderbird software, which allows a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information.

The use of the MediaInputPort class after its release allows malicious actors operating remotely to execute arbitrary code or cause service failures errors in handling dynamic memory by using incorrect control messages from Web Audio...

The vulnerability of Thunderbird software allows a malicious attacker to compromise the confidentiality of protected information.

A vulnerability exists in the mozilla::dom::AudioEventTimeline function within the implementation of the Web Audio API in Mozilla Firefox, Firefox ESR, and Thunderbird. This vulnerability arises due to the improper creation of the audio data timeline. Exploiting this vulnerability allows maliciou...

The vulnerability of the Firefox browser, which allows a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information.

The use of the MediaInputPort class after its release in Mozilla Firefox allows malicious actors operating remotely to execute arbitrary code or cause service failures errors when dealing with dynamic memory. This is achieved by using an incorrect order of Web Audio control messages...

The vulnerability of the Firefox browser, which allows a malicious attacker to compromise the confidentiality of protected information

A vulnerability exists in the mozilla::dom::AudioEventTimeline function within the implementation of the Web Audio API in Mozilla Firefox, due to the improper creation of the audio data timeline. Exploiting this vulnerability allows malicious actors, operating remotely, to access confidential...

The vulnerability of Thunderbird software, which allows a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information.

A vulnerability exists in the mozilla::dom::AudioBufferSourceNodeEngine::CopyFromInputBuffer function in Mozilla Firefox and Thunderbird, due to improper handling of Web Audio’s buffer memory allocation. Exploitation of this vulnerability allows malicious actors to execute arbitrary code or cause...

Updated firefox packages fix security vulnerabilities

Updated nss and firefox packages fix security vulnerabilities: Security researcher SkyLined reported a use-after-free issue in how audio is handled through the Web Audio API during MediaStream playback through interactions with the Web Audio API. This results in a potentially exploitable crash...

Updated iceape/sqlite3 packages fix security vulnerabilities

Updated iceape packages fix security issues. The sqlite3 package has been updated as well since the new iceape version requires the SQLITEENABLEDBSTATVTAB feature to be enabled in sqlite. This sqlite3 update also enables ICU support, fixing bug 16814 . Use-after-free vulnerability in the...

Mozilla Firefox Audio Processing Memory Misreference Vulnerability

Mozilla Firefox is an open source WEB browser. A memory misreference vulnerability in Mozilla Firefox MediaStream playback when processing audio via the Web Audio API allows remote attackers to construct a malicious web page and trick users into parsing it, which could crash the application or...

CVE-2015-4477

Use-after-free vulnerability in the MediaStream playback feature in Mozilla Firefox before 40.0 allows remote attackers to execute arbitrary code via unspecified use of the Web Audio API...

Design/Logic Flaw

Use-after-free vulnerability in the MediaStream playback feature in Mozilla Firefox before 40.0 allows remote attackers to execute arbitrary code via unspecified use of the Web Audio API...

CVE-2015-4477

CVE-2015-4477 is a use-after-free vulnerability in Firefox’s MediaStream playback, triggered by the Web Audio API during audio processing. The issue allows remote attackers to potentially execute arbitrary code and is associated with Firefox versions before 40.0. Remediation is to update to Firef...

CVE-2015-4477

Use-after-free vulnerability in the MediaStream playback feature in Mozilla Firefox before 40.0 allows remote attackers to execute arbitrary code via unspecified use of the Web Audio API...

UBUNTU-CVE-2015-4477

Use-after-free vulnerability in the MediaStream playback feature in Mozilla Firefox before 40.0 allows remote attackers to execute arbitrary code via unspecified use of the Web Audio API...

Use-after-free in MediaStream playback — Mozilla

Security researcher SkyLined reported a use-after-free issue in how audio is handled through the Web Audio API during MediaStream playback through interactions with the Web Audio API. This results in a potentially exploitable crash...

CVE-2015-4477

Use-after-free vulnerability in the MediaStream playback feature in Mozilla Firefox before 40.0 allows remote attackers to execute arbitrary code via unspecified use of the Web Audio API...

Security update for MozillaFirefox, mozilla-nss (important)

MozillaFirefox was updated to version 39.0 to fix 21 security issues. These security issues were fixed: - CVE-2015-2724/CVE-2015-2725/CVE-2015-2726: Miscellaneous memory safety hazards bsc935979. - CVE-2015-2727: Local files or privileged URLs in pages can be opened into new tabs bsc935979. -...

Out-of-bounds

The AudioParamTimeline::AudioNodeInputValue function in the Web Audio implementation in Mozilla Firefox before 39.0 and Firefox ESR 38.x before 38.1 does not properly calculate an oscillator rendering range, which allows remote attackers to obtain sensitive information from process memory or caus...

CVE-2015-2729

The AudioParamTimeline::AudioNodeInputValue function in the Web Audio implementation in Mozilla Firefox before 39.0 and Firefox ESR 38.x before 38.1 does not properly calculate an oscillator rendering range, which allows remote attackers to obtain sensitive information from process memory or caus...