Jan-Ivar Bruaroey

The issue is related to a use-after-free vulnerability in the WebRTC component of the Firefox browser. This could allow a remote attacker to access confidential data, compromise data integrity, and cause a denial of service.

The issue is related to errors in authorization, allowing a remote attacker to bypass existing security restrictions. Specifically, when a user has already allowed a website to access the microphone and camera, disabling camera sharing does not fully prevent the website from re-enabling it without an additional prompt, provided the website continues recording with the microphone until the camera is re-enabled.

The issue is related to errors in resource management, potentially allowing a remote attacker to gain unauthorized access to protected information. It could also cause the browser to leak unintended information by transferring a screen sharing state into another tab.

The issue is related to memory safety bugs in Firefox, which can lead to memory corruption. With sufficient effort, these bugs could be exploited to run arbitrary code. The estimated number of potentially affected devices worldwide is not specified. There is no information about real-world incidents where this issue was exploited.

A issue exists where websites with camera or microphone permission can enumerate device names, potentially disclosing the user's name, particularly when AirPods are connected to an iPhone and named by default with the user's name.

The issue is related to the improper assignment of access permissions for critical resources in Firefox, specifically concerning WebRTC permissions for microphone and camera access. This could potentially allow a remote attacker to gain unauthorized access to information. To mitigate this, Firefox will no longer persist permissions for access to these resources, prompting users for permissions on each use instead.

Memory safety bugs were reported, showing evidence of memory corruption. It is presumed that with enough effort, some of these bugs could be exploited to run arbitrary code.