Denial Of Service (DoS)

Mozilla Firefox is vulnerable to use-after-free vulnerability. This occurs when events are fired for a "FontFace" object after the object has been already been destroyed while working with fonts resulting a potentially exploitable crash...

Arbitrary Code Execution

Mozilla Firefox is vulnerable to arbitrary code execution attacks. This is because the JIT-spray targeting asm.js combined with a heap spray allows for a bypass of ASLR and DEP protections leading to potential memory corruption attacks...

Denial Of Service (DoS)

Mozilla Firefox is vulnerable to use-after-free vulnerability. This occurs when flushing and resizing layout because the "PressShell" object has been freed while still in use which results in a potentially exploitable crash during these operations...

Out Of Bound Reads (OOB)

Mozilla Firefox is vulnerable to out of bound reads. This vulnerability exists due to an assertion error in graphite2. An attacker could possibly exploit this flaw to cause an application crash...

Uninitialized Buffer Allocation

Mozilla Firefox is vulnerable to uninitialized buffer allocation vulnerability. The vulnerability exists in the Graphite component in the readglyph function in GlyphCache.cpp related to use of uninitialized memory. An unauthenticated, remote attacker can exploit this to have an unspecified impact...

Out-of-bounds Read

Mozilla Firefox is vulnerable to out-of-bounds reads. The vulnerability exists in the Graphite component in getClassGlyph function in Silf.cpp due to improper validation of user-supplied input. An unauthenticated, remote attacker can exploit this to cause a denial of service condition...

Denial Of Service (DoS)

Mozilla Firefox is vulnerable to out-of-bounds reads. This vulnerability exists in "graphite2::Silf::readGraphite" in Graphite2 Library. An attacker could possibly exploit this flaw to disclose potentially sensitive memory or cause an application crash...

Denial Of Service (DoS)

Mozilla Firefox is vulnerable to heap-based buffer overflow writes. This vulnerability exists in "lz4::decompress" in Graphite2 library. An attacker could exploit this issue to cause a crash or, possibly, execute arbitrary code...

Denial Of Service (DoS)

Mozilla Firefox is an vulnerable to out-of-bounds reads. This exists in "graphite2::Pass::readPass" in Graphite2 Library. An attacker could possibly exploit this flaw to disclose potentially sensitive memory or cause an application crash...

Arbitrary Code Execution

Mozilla Firefox is vulnerable to Arbitrary Code Execution. This is because a flaw exists in the isLabelSafe function in nsIDNService.cpp that is triggered when handling characters from different unicode blocks. An unauthenticated, remote attacker can exploit this, via a specially crafted IDN...

Use-After-Free

Mozilla Firefox is vulnerable to use-after-free vulnerability. The vulnerability exists in the AppendAudioSegment function in TrackEncoder.cpp that is triggered when the number of channels in an audio stream changes while the Opus encoder is in use. An unauthenticated, remote attacker can exploit...

Use-After-Free

Mozilla Firefox is vulnerable to use-after-free vulnerability. This vulnerability exists in ActorsParent.cpp due to improper handling of objects in memory. An unauthenticated, remote attacker can exploit this to cause a denial of service condition or the execution of arbitrary code...

Denial Of Service (DoS)

Mozilla Firefox is vulnerable to out-of-bound reads. The vulnerability exists in the IsComplete function in WebGLTexture.cpp that is triggered when handling textures. An unauthenticated, remote attacker can exploit this to disclose memory contents...

Denial Of Service (DoS)

Mozilla Firefox is vulnerable to out-of-bounds reads. This vulnerability exists in the AppendAudioSegment function in TrackEncoder.cpp that is triggered when the number of channels in an audio stream changes while the Opus encoder is in use. An unauthenticated, remote attacker can exploit this to...

Use-after-Free

Mozilla Firefox is vulnerable to use-after-free vulnerability. This is possible when using an incorrect URL during the reloading of a docshell which results in an application crash...

User-After-Free

Mozilla Firefox is vulnerable to use-after-free vulnerability. This vulnerability is caused when handling events while specific user interaction occurs with the input method editor IME. An unauthenticated, remote attacker can exploit this to cause a denial of service condition or the execution of...

Use-after-Free

Mozilla Firefox is vulnerable to use-after-free vulnerability. The vulnerability is caused during video control operations when a "" element holds a reference to an older window if that window has been replaced in the DOM resulting in an application crash...

Denial Of Service (DoS)

Mozilla Firefox is vulnerable to use-after-free vulnerability. This is possible with the frameloader during tree reconstruction while regenerating CSS layout when attempting to use a node in the tree that no longer exists. An attacker may exploit this issue to crash the affected application,...

Denial Of Service (DoS)

Mozilla Firefox is vulnerable to buffer overflow vulnerability. This is due to memory allocation issues when handling large amounts of incoming data resulting a potentially exploitable crash...

Certificate Validation Bypas

Mozilla Firefox is vulnerable to certificate validation bypass. An attacker could first obtain a valid signature for a fraudulent addon, which can be done without review, then hijack the call between the user and AMO to replace the response from /update/VersionCheck.php with the IDs of the...