Robert Sayre

A buffer overflow issue exists in the JavaScript engine, potentially allowing remote attackers to execute arbitrary code. This issue involves exception timing and a large number of string values, related to an "atom map" problem.

The issue allows remote attackers to cause a denial of service, resulting in memory corruption and application crash, or possibly execute arbitrary code. This is related to the `TraceRecorder::snapshot` function in `js/src/jstracer.cpp` and other unspecified vectors.