CVE-2018-5159

An integer overflow can occur in the Skia library due to 32-bit integer use in an array without integer overflow checks, resulting in possible out-of-bounds writes. This could lead to a potentially exploitable crash triggerable by web content. This vulnerability affects Thunderbird < 52.8, Thunderbird ESR < 52.8, Firefox < 60, and Firefox ESR < 52.8.

Score
CVSS 3.0 9.8 Critical
Status
Modified - security@mozilla.org
Published
2018-06-11
Last modified
2024-08-05
Weaknesses
CWE-190, CWE-787

Affected products

References

 
 
© AVABIS GmbH privacypolicy about