Security Vulnerabilities fixed in Firefox 112, Firefox for Android 112, Focus for Android 112 — Mozilla

An attacker could have caused an out of bounds memory access using WebGL APIs, leading to memory corruption and a potentially exploitable crash.This bug only affects Firefox for macOS. Other operating systems are unaffected. A local attacker can trick the Mozilla Maintenance Service into applying...

PT-2023-5270

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 112 Firefox for Android versions prior to 112 Focus for Android versions prior to 112 Description The issue is related to multiple race conditions in the font initialization, which could lead to memory corruption and...

ghostscript:gs_device_tiffsep1_fuzzer: Heap-use-after-free in FT_Stream_ReadULong

Detailed Report: https://oss-fuzz.com/testcase?key=6176191119228928 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gsdevicetiffsep1fuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: Heap-use-after-free READ 1 Crash Address: 0x62e00000c450 Crash State:...