Lucene search
K

6 matches found

AstraLinux
AstraLinux
added 2026/06/19 11:10 a.m.3 views

Astra Linux – Vulnerability in Firefox

The return value from gfx::SourceSurfaceSkia::Map wasn’t verified, which could potentially lead to a null pointer dereferencing. This vulnerability affects Firefox versions less than 110...

7.5CVSS7.4AI score0.00622EPSS
Exploits0References2
CNNVD
CNNVD
added 2025/04/25 12:0 a.m.2 views

z2d 安全漏洞

z2d is an open source 2D graphics library written in the pure Zig language by Chris Marchesi, an individual developer. A security vulnerability exists in z2d version 0.6.0, which stems from the possibility that the source surface may be completely out of bounds on the x-axis when using...

7.3CVSS6.7AI score0.00149EPSS
Exploits0References5
OSV
OSV
added 2023/09/11 9:15 a.m.1 views

UBUNTU-CVE-2023-4576

On Windows, an integer overflow could occur in RecordedSourceSurfaceCreation which resulted in a heap buffer overflow potentially leaking sensitive data that could have led to a sandbox escape. This bug only affects Firefox on Windows. Other operating systems are unaffected. This vulnerability...

8.6CVSS7.4AI score0.00688EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2023/08/30 10:15 a.m.30 views

CVE-2023-4576

A flaw was found in Mozilla. The Mozilla Foundation Security Advisory: On Windows, an integer overflow could occur in RecordedSourceSurfaceCreation, which results in a heap buffer overflow, potentially leaking sensitive data that could have led to a sandbox escape. This bug only affects Firefox o...

7.5CVSS6.6AI score0.00688EPSS
Exploits0References4
BDU FSTEC
BDU FSTEC
added 2023/08/21 12:0 a.m.5 views

The vulnerability of the gfx::SourceSurfaceSkia::Map() function in the Firefox web browser allows a hacker to trigger a service denial.

The vulnerability of the gfx::SourceSurfaceSkia::Map function in the Firefox web browser is related to an unvalidated return value. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

7.8CVSS7.2AI score0.00622EPSS
Exploits0References8Affected Software4
BDU FSTEC
BDU FSTEC
added 2015/07/21 12:0 a.m.5 views

The vulnerability of the Firefox ESR browser, which allows a hacker to read data from uninitialized memory areas

The vulnerability of the YCbCrImageDataDeserializer::ToDataSourceSurface function in Firefox ESR browsers is related to code errors. Exploiting this vulnerability may allow an attacker to read data from uninitialized memory areas remotely...

10CVSS5.8AI score0.02654EPSS
Exploits0References3Affected Software1
Rows per page
Query Builder