Jed Davis

قد تسمح أخطاء أمان الذاكرة التي تنطوي على تلف في الذاكرة للمهاجم بتنفيذ تعليمات برمجية عشوائية.

يتأثر البرنامج بثغرات أمنية في الذاكرة قد تسمح بتنفيذ تعليمات برمجية تعسفية. قد تؤدي هذه الثغرات إلى تلف الذاكرة، مما قد يتيح للمهاجم استغلال النظام عن طريق حث المستخدم على فتح موقع ويب مصمم خصيصًا لهذا الغرض. لا تتوفر معلومات حول عدد الأجهزة التي قد تكون متأثرة أو الحوادث الفعلية. تتعلق المشكلة بثغرة في التحقق الصحيح من أحجام المخازن المؤقتة أثناء عمليات نسخ البيانات.

The issue is related to a buffer boundary violation. When resolving a symlink, a race may occur where the buffer passed to `readlink` may actually be smaller than necessary. This bug only affects Firefox on Unix-based operating systems, including Android, Linux, and MacOS, while Windows is unaffected.

The issue is related to memory safety bugs that can lead to memory corruption. It is presumed that with sufficient effort, these bugs could be exploited to run arbitrary code. The vulnerability is associated with a buffer overflow in memory, which can allow a remote attacker to execute arbitrary code.

A compromised content process could confuse higher privileged processes into interacting with resource handles that the unprivileged process should not have access to, by generally accepting and passing resource handles across processes. This issue only affects Firefox for Windows and MacOS, with other operating systems being unaffected.

The issue is related to an Inter-process Communication (IPC) vulnerability. It affects the authentication mechanism between IPC endpoints and server parents during IPC process creation. The authentication is insufficient for channels created after the IPC process is started, which could allow for a sandbox escape through IPC channels due to lack of message validation in the listener process.

The issue is related to memory safety bugs, including evidence of memory corruption, which could potentially be exploited to run arbitrary code. This is due to a buffer overflow in memory, allowing a remote attacker to execute arbitrary code.

The issue is caused by memory safety bugs, including evidence of memory corruption, which could potentially be exploited to run arbitrary code with enough effort. It is also described as a buffer overflow in memory, allowing a remote attacker to execute arbitrary code.

The issue is caused by memory safety bugs, including evidence of memory corruption, which could potentially be exploited to run arbitrary code with enough effort. This affects various versions of Firefox, Firefox ESR, and Thunderbird.

The issue occurs on Linux when the seccomp-bpf filter is running and the Gecko Media Plugin sandbox is started, causing the sandbox to fail and leaving items with only the filter's protection, which is typically weaker than the sandbox. This issue is specific to Linux and does not affect other operating systems.

Memory safety bugs were reported, showing evidence of memory corruption. It is presumed that with enough effort, some of these bugs could be exploited to run arbitrary code.

The issue is related to errors in the code of the Network Security Services library and the Firefox browser. It may allow a remote attacker to cause a denial of service, such as memory corruption and application crash, or have other unspecified impacts.

The issue is related to the `prctl vma anon name` function in the Android kernel, which lacks a procedure to check the availability of virtual memory areas for update. This can be exploited by a remote attacker using a specially crafted application to gain privileges or cause a denial of service, potentially leading to vma list corruption.

The Inter-process Communication (IPC) implementation does not properly validate messages, which has unspecified impact and attack vectors.