Tom Ritter

A sandbox escape issue exists in the Responsive Design Mode component. This allows a malicious actor to potentially bypass security restrictions.

The issue is related to memory safety bugs, which have shown evidence of memory corruption. It is presumed that with sufficient effort, some of these bugs could be exploited to run arbitrary code. The vulnerability is associated with a buffer overflow in memory, allowing a remote attacker to potentially execute arbitrary code.

A security issue exists where a sandboxed iframe with the `allow-top-navigation-by-user-activation` attribute can still process redirect headers to external protocols, potentially prompting the user.

The issue is related to memory safety bugs and buffer overflow when processing HTML content, which could allow a remote attacker to execute arbitrary code or cause a denial of service with a specially crafted web page. Some of these bugs showed evidence of memory corruption.

Name of the Vulnerable Software and Affected Versions: Firefox versions prior to 87 Description: The issue allows an attacker to enable the Devtools remote debugging feature unnoticed by the user, potentially by altering specific about:config values, such as those modified by malware running on the user's computer. This could enable a remote attacker, who can make a direct network connection to the victim, to monitor the user's browsing activity and plaintext network traffic. A visual cue has been introduced for Devtools when it has an open network socket to address this issue. Recommendations: For Firefox versions prior to 87, update to version 87 or later to resolve the issue. As a temporary workaround, consider disabling the Devtools remote debugging feature until the update can be applied. Restrict access to the about:config values to minimize the risk of exploitation.

The issue is related to a buffer overflow due to unchecked input size, which could allow a remote attacker to gain unauthorized access to information and compromise its integrity and availability. There are memory safety bugs present, some of which show evidence of memory corruption, and it is presumed that these could be exploited to run arbitrary code with enough effort.

The issue is related to memory safety bugs, including evidence of memory corruption, which could potentially be exploited to run arbitrary code. This is due to a buffer overflow in memory, allowing a remote attacker to execute arbitrary code.

The issue allows physically proximate attackers to obtain root access by connecting a crafted HDMI cable and using a sys session to modify the `ramboot` environment variable.

The issue concerns a hardcoded password for the `root` account in the device, making it easier for attackers with physical access to obtain administrative access by leveraging a login prompt.

The issue allows physically proximate attackers to bypass the intended boot process and obtain a login prompt by connecting a crafted HDMI cable and sending a SysReq interrupt.