CVE-2019-9799

Insufficient bounds checking of data during inter-process communication might allow a compromised content process to be able to read memory from the parent process under certain conditions. This vulnerability affects Firefox < 66.

Score

CVSS 3.0 7.5 High

Status

Modified - security@mozilla.org

Published

2019-04-26

Last modified

2024-08-04

Weaknesses

CWE-125, CWE-20

Affected products

• Firefox (Mozilla)

References

• https://bugzilla.mozilla.org/show_bug.cgi?id=1505678
• https://www.mozilla.org/security/advisories/mfsa2019-07/