EUVD-2026-111399

When coalescing adjacent text nodes in addText and fosterParent, appending to an existing TextNode's Data via string concatenation n.Data += text reallocated and copied the accumulated string on every token. Inputs containing many short text runs separated by ignored end tags such as "a" caused...

CVE-2026-78661

When coalescing adjacent text nodes in addText and fosterParent, appending to an existing TextNode's Data via string concatenation n.Data += text reallocated and copied the accumulated string on every token. Inputs containing many short text runs separated by ignored end tags such as "a" caused...

CVE-2026-78661 Avoid quadratic complexity when coalescing text nodes in html in golang.org/x/net

When coalescing adjacent text nodes in addText and fosterParent, appending to an existing TextNode's Data via string concatenation n.Data += text reallocated and copied the accumulated string on every token. Inputs containing many short text runs separated by ignored end tags such as "a" caused...

CVE-2026-78661

The golang.org/x/net package is vulnerable to a quadratic complexity issue when coalescing adjacent text nodes within the addText and fosterParent functions. The root cause is the use of string concatenation (n.Data += text) for appending data, which triggers repetitive reallocations and byte cop...

CVE-2014-4140

Some rough notes 0:007 u MSHTML!CHtmRootParseCtx::AddText+0x104: 6efff0a5 8b8e88000000 mov ecx,dword ptr esi+88h 6efff0ab 898d70ffffff mov dword ptr ebp-90h,ecx 6efff0b1 8945ac mov dword ptr ebp-54h,eax 6efff0b4 8b5118 mov edx,dword ptr ecx+18h 6efff0b7 8bca mov ecx,edx 6efff0b9 83e103 and ecx,3...

Firefox DoS

The vulnerability of the XULContentSinkImpl::AddText function in Firefox and Firefox ESR browsers is caused by buffer overflow. Exploiting this vulnerability can allow a malicious actor to cause a service failure remotely...

Mozilla Firefox and Firefox ESR 'XULContentSinkImpl::AddText' function buffer overflow vulnerability

Mozilla Firefox is an open source web browser. A buffer overflow vulnerability in the Mozilla Firefox 'XULContentSinkImpl::AddText' function allows an attacker to construct a malicious web page and trick the user into parsing it, which could crash the application or execute arbitrary code...

CVE-2015-7175

The XULContentSinkImpl::AddText function in Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 might allow remote attackers to cause a denial of service memory corruption and application crash or possibly have unspecified other impact via unknown vectors, related to an "overflow."...

CVE-2015-7175: Improper Restriction of Operations within the Bounds of a Memory Buffer

The XULContentSinkImpl::AddText function in Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 might allow remote attackers to cause a denial of service memory corruption and application crash or possibly have unspecified other impact via unknown vectors, related to an "overflow."...

Mozilla: Vulnerabilities found through code inspection (MFSA 2015-112)

The XULContentSinkImpl::AddText function in Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 might allow remote attackers to cause a denial of service memory corruption and application crash or possibly have unspecified other impact via unknown vectors, related to an "overflow."...

PT-2015-2187

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 41.0 Mozilla Firefox ESR versions prior to 38.3 Description The issue is related to an "overflow" in the XULContentSinkImpl::AddText function, which might allow remote attackers to cause a denial of service,...