nsJPEGEncoder::emptyOutputBuffer() Code Execution

The vulnerability of the nsJPEGEncoder::emptyOutputBuffer function in the Mozilla Firefox browser and Thunderbird email client is related to reading and writing data beyond the buffer’s memory limit. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

PT-2020-6716

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 78 Description The issue arises in non-standard configurations where a JPEG image created by JavaScript can cause an internal variable to overflow. This overflow results in an out of bounds write, leading to memory...