Christian Holler

Issues exist within the DOM Navigation and JavaScript WebAssembly components. The DOM Navigation flaw involves improper access control, while the WebAssembly issue is caused by a use-after-free condition involving an incorrect pointer. A remote attacker could exploit these flaws to impact the confidentiality and integrity of protected information or disclose sensitive data.

Memory safety bugs exist that exhibit evidence of memory corruption. These issues could potentially be exploited to execute arbitrary code.

Memory safety bugs involving memory corruption may allow the execution of arbitrary code.

Memory safety bugs exist that exhibit evidence of memory corruption. These issues could potentially be exploited to execute arbitrary code.

Memory safety bugs exist that exhibit evidence of memory corruption, which could potentially be exploited to execute arbitrary code.

Memory safety bugs exist that exhibit evidence of memory corruption, which could potentially be exploited to execute arbitrary code.

Memory safety bugs involving memory corruption could allow an attacker to run arbitrary code.

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 149.0.2 Firefox ESR versions prior to 115.34.1 and 140.9.1 Thunderbird versions prior to 149.0.2 and 140.9.1 Description Memory safety bugs are present in Firefox and Thunderbird, with some showing evidence of memory corruption. These bugs could potentially be exploited to run arbitrary code. Recommendations Update Firefox to version 149.0.2 or later. Update Firefox ESR to version 115.34.1 or 140.9.1 or later. Update Thunderbird to version 149.0.2 or later. Update Thunderbird ESR to version 140.9.1 or later.

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 149.0.2 Thunderbird versions prior to 149.0.2 Description Memory safety bugs exist in Firefox 149.0.1 and Thunderbird 149.0.1. These bugs demonstrate evidence of memory corruption, and it is presumed that, with sufficient effort, they could be exploited to execute arbitrary code. The vulnerability involves writing beyond buffer boundaries. Recommendations Update Firefox to version 149.0.2 or later. Update Thunderbird to version 149.0.2 or later.

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 149.0.2 Firefox ESR versions prior to 140.9.1 Thunderbird versions prior to 149.0.2 Thunderbird ESR versions prior to 140.9.1 Description Memory safety bugs are present in Firefox and Thunderbird, potentially leading to memory corruption and arbitrary code execution. These bugs were identified in versions ESR 140.9.0, 140.9.0, 149.0.1, and 149.0.1. Recommendations Update Firefox to version 149.0.2 or later. Update Firefox ESR to version 140.9.1 or later. Update Thunderbird to version 149.0.2 or later. Update Thunderbird ESR to version 140.9.1 or later.

Memory safety issues exist in Firefox 148 and Thunderbird 148. These bugs demonstrate evidence of memory corruption, and it is presumed that, with sufficient effort, they could potentially be exploited to execute arbitrary code.

An object lifecycle issue in V8 allows a remote attacker to perform an out-of-bounds memory read by using a crafted HTML page. An out-of-bounds memory read occurs when a program reads data past the end or before the beginning of the intended memory buffer.

The software contains memory safety bugs, some of which demonstrate evidence of memory corruption. It is presumed that, with sufficient effort, these bugs could potentially be exploited to execute arbitrary code.

The software contains memory safety bugs, some of which demonstrate evidence of memory corruption. It is presumed that, with sufficient effort, these bugs could potentially be exploited to execute arbitrary code.

The issue is related to the Garbage Collector component of Mozilla Firefox, where there is a use-after-free error due to concurrent loading of the singleton global runtime and garbage collection. This could allow a remote attacker to execute arbitrary code.

The issue is related to the implementation of the WASM technology in Mozilla Firefox, caused by insufficient input validation. This could allow a remote attacker to cause a denial of service. Some WASM source files could have caused a crash when loaded in devtools.

The issue is related to a potential use-after-free in the Ion Engine, where a hashtable could have been mutated while there was a live interior reference, leading to an exploitable crash. This could allow a remote attacker to access confidential data, compromise its integrity, and cause a denial of service.

The issue is related to memory safety bugs that could potentially be exploited to run arbitrary code. These bugs are present in the processing of HTML content and may cause memory corruption. The vulnerability could allow a remote attacker to execute arbitrary code.

The issue is related to the mishandling of PKCS 12 Safe Bag attributes, which could allow for arbitrary memory writes. This is due to improper bounds checking within a memory buffer. An attacker could exploit this issue to enable remote arbitrary memory writes.

The issue is related to insufficient input validation when handling array element values, allowing a remote attacker to bypass security restrictions. An attacker could write a value to the first element in a zero-length JavaScript array without writing to an invalid memory address.