Jed Davis

Falhas de segurança de memória envolvendo corrupção de memória podem permitir que um invasor execute código arbitrário.

O software é afetado por falhas de segurança de memória que podem permitir a execução arbitrária de código. Essas falhas podem levar à corrupção de memória, potencialmente permitindo que um atacante explore o sistema ao induzir um usuário a abrir um site especialmente criado. Não há informações disponíveis sobre o número de dispositivos potencialmente afetados ou incidentes reais. O problema envolve uma falha ao validar corretamente os tamanhos de buffer durante operações de cópia de dados.

The issue is related to a buffer boundary violation. When resolving a symlink, a race may occur where the buffer passed to `readlink` may actually be smaller than necessary. This bug only affects Firefox on Unix-based operating systems, including Android, Linux, and MacOS, while Windows is unaffected.

The issue is related to memory safety bugs that can lead to memory corruption. It is presumed that with sufficient effort, these bugs could be exploited to run arbitrary code. The vulnerability is associated with a buffer overflow in memory, which can allow a remote attacker to execute arbitrary code.

Um processo de conteúdo comprometido poderia induzir processos com privilégios superiores a interagir com identificadores de recursos aos quais o processo sem privilégios não deveria ter acesso, ao aceitar e passar identificadores de recursos entre processos de maneira generalizada. Este problema afeta apenas o Firefox para Windows e macOS; outros sistemas operacionais não são afetados.

The issue is related to an Inter-process Communication (IPC) vulnerability. It affects the authentication mechanism between IPC endpoints and server parents during IPC process creation. The authentication is insufficient for channels created after the IPC process is started, which could allow for a sandbox escape through IPC channels due to lack of message validation in the listener process.

The issue is related to memory safety bugs, including evidence of memory corruption, which could potentially be exploited to run arbitrary code. This is due to a buffer overflow in memory, allowing a remote attacker to execute arbitrary code.

The issue is caused by memory safety bugs, including evidence of memory corruption, which could potentially be exploited to run arbitrary code with enough effort. It is also described as a buffer overflow in memory, allowing a remote attacker to execute arbitrary code.

The issue is caused by memory safety bugs, including evidence of memory corruption, which could potentially be exploited to run arbitrary code with enough effort. This affects various versions of Firefox, Firefox ESR, and Thunderbird.

The issue occurs on Linux when the seccomp-bpf filter is running and the Gecko Media Plugin sandbox is started, causing the sandbox to fail and leaving items with only the filter's protection, which is typically weaker than the sandbox. This issue is specific to Linux and does not affect other operating systems.

Memory safety bugs were reported, showing evidence of memory corruption. It is presumed that with enough effort, some of these bugs could be exploited to run arbitrary code.

The issue is related to errors in the code of the Network Security Services library and the Firefox browser. It may allow a remote attacker to cause a denial of service, such as memory corruption and application crash, or have other unspecified impacts.

The issue is related to the `prctl vma anon name` function in the Android kernel, which lacks a procedure to check the availability of virtual memory areas for update. This can be exploited by a remote attacker using a specially crafted application to gain privileges or cause a denial of service, potentially leading to vma list corruption.

The Inter-process Communication (IPC) implementation does not properly validate messages, which has unspecified impact and attack vectors.