CVE-2026-74936-gc-potato

CVE-2026-74936 A not fancy reproduction. The baseline required some fiddling here. Mozilla describes this issue as a WebAssembly use-after-free. Public fix 9823b5c86ffa keeps the exact trapping wasm::Code alive in JitActivation. The test performs a bad-signature cross-instance tail call. A Debugg...

Astra Linux – Vulnerability in Firefox

JIT compilation errors in the JavaScript: WebAssembly component. This vulnerability has been fixed in Firefox 152 and Thunderbird 152...

Astra Linux – Vulnerability in Firefox, Thunderbird

A use-after-free in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 148, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8...

WebAssembly DoS

The vulnerability of the WebAssembly component in the Firefox web browser and the Thunderbird email client is related to type conversion errors. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

WebAssembly DoS

The vulnerability of the WebAssembly component in Mozilla Firefox, Firefox ESR, and the email client Thunderbird, Thunderbird ESR, is related to improper code generation. Exploiting this vulnerability can allow an attacker to cause service interruptions...

WebAssembly DoS

The vulnerability of the WebAssembly component in Mozilla Firefox arises due to an overflow in memory buffers. Exploiting this vulnerability can allow a remote attacker to cause a service failure...