CVE-2018-12386

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 62.0.3 Firefox ESR versions prior to 60.2.2

Description A vulnerability in register allocation in JavaScript can lead to type confusion, allowing for an arbitrary read and write. This leads to remote code execution inside the sandboxed content process when triggered. The issue is related to errors in data type conversion.

Recommendations For Firefox versions prior to 62.0.3, update to version 62.0.3 or later to resolve the issue. For Firefox ESR versions prior to 60.2.2, update to version 60.2.2 or later to resolve the issue.