Abhishek Arya

The issue is related to a JavaScript parser vulnerability in Mozilla Firefox, which involves reading data beyond buffer boundaries in memory. This can potentially allow a remote attacker to gain unauthorized access to protected information or cause a denial of service. The vulnerability usually results in a non-exploitable crash but can leak a limited amount of information from memory if it matches JavaScript identifier syntax.

A use-after-free issue can occur in the Fetch API when the worker or the associated window are freed while still in use, potentially leading to a crash. This issue may allow a remote attacker to cause a denial of service.

A use-after-free and use-after-scope issue exists when logging errors from headers for XML HTTP Requests (XHR), potentially leading to a crash. This could be exploited by a remote attacker to cause a denial of service.

A heap-buffer-overflow issue in Cairo when processing SVG content, caused by compiler optimization, can result in a potentially exploitable crash.

The issue arises from the nsImageGeometryMixin class not properly performing a cast of an unspecified variable during handling of INPUT elements. This allows remote attackers to execute arbitrary code via a crafted web site.

The issue allows remote attackers to cause a denial of service, resulting in an out-of-bounds read and application crash. This is achieved through text runs in conjunction with a "display: contents" Cascading Style Sheets (CSS) property, specifically exploiting the PropertyProvider::GetSpacingInternal function.

The issue is related to a use-after-free vulnerability in the `nsXULPopupManager::KeyDown` function. This vulnerability allows attackers to execute arbitrary code or cause a denial of service, such as heap memory corruption and application crash, by leveraging keyboard access to use the Alt key during the selection of top-level menu items.

The issue is related to insufficient input validation in the Qualcomm hardware video codec. This can be exploited by a remote attacker to cause a denial of service, resulting in a device reboot, by using a specially crafted file. No information is provided about the estimated number of potentially affected devices or real-world incidents.

The issue is caused by a buffer overflow in the mediaserver component of the Android operating system. Exploitation of this issue may allow a remote attacker to execute arbitrary code or cause a denial of service (memory corruption) using a specially crafted media file.

The issue is caused by a buffer overflow in the mediaserver component of the Android operating system. Exploitation of this issue may allow a remote attacker to execute arbitrary code or cause a denial of service (memory corruption) by using a specially crafted media file.

The issue is related to a heap-based buffer overflow in the resize context buffers function in libvpx, which can be exploited by remote attackers via malformed WebM video data, potentially allowing them to execute arbitrary code.

The issue is related to the decrease ref count function in the libvpx library, which can be exploited by remote attackers using malformed WebM video data. This can lead to the execution of arbitrary code or cause a denial of service due to an out-of-bounds read. The vulnerability is also described as a buffer overflow.

The issue is related to the Off Main Thread Compositing (OMTC) implementation, which attempts to use memset for a memory region of negative length during interaction with the `mozilla::layers::BufferTextureClient::AllocateForSurface` function. This allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via vectors that trigger rendering of 2D graphics content.

The issue is related to the Off Main Thread Compositing (OMTC) implementation, which makes an incorrect memset call during interaction with the `mozilla::layers::BufferTextureClient::AllocateForSurface` function. This allows remote attackers to execute arbitrary code or cause a denial of service, resulting in memory corruption and application crash, via vectors that trigger rendering of 2D graphics content.

A heap-based buffer overflow issue exists in the mozilla::gfx::CopyRect function, allowing remote attackers to obtain sensitive information from uninitialized process memory via a malformed SVG graphic.

The issue is related to a use-after-free vulnerability in the `nsContentUtils::ContentIsHostIncludingDescendantOf` function. This vulnerability can be exploited by remote attackers to execute arbitrary code or cause a denial of service, resulting in heap memory corruption. The exploitation vectors involve HTML document templates.

The issue allows remote attackers to execute arbitrary code or cause a denial of service due to heap memory corruption. This is achieved through vectors involving stylesheet cloning, exploiting a use-after-free vulnerability in the `nsAnimationManager::BuildAnimations` function.

A use-after-free issue in the mozilla::ResetDir function allows remote attackers to execute arbitrary code or cause a denial of service due to heap memory corruption via unspecified vectors.

A use-after-free issue in the `nsFrameList::FirstChild` function allows remote attackers to execute arbitrary code or cause a denial of service due to heap memory corruption via unspecified vectors.

The issue allows remote attackers to execute arbitrary code or cause a denial of service via unspecified vectors, related to an out-of-bounds read in the `gfxSkipCharsIterator::SetOffsets` function.