CVE-2018-5094

Name of the Vulnerable Software and Affected Versions: Firefox versions prior to 58

Description: A heap buffer overflow issue may occur in WebAssembly when shrinkElements is called followed by garbage collection on memory that is now uninitialized, resulting in a potentially exploitable crash. The vulnerability can be exploited by a remote attacker to cause a denial of service.

Recommendations: For versions prior to 58, update to version 58 or later to resolve the issue. As a temporary workaround, consider disabling WebAssembly until a patch is available. Restrict access to WebAssembly modules to minimize the risk of exploitation. Avoid using the shrinkElements function in WebAssembly until the issue is resolved.