PT-2018-8245

CVE-2017-5392

Published

2017-02-02

Updated

2024-12-12

Description by

CVSS 3.1

9.8

Critical

MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: Firefox versions prior to 51

Description: The issue arises from weak proxy objects having weak references on multiple threads when they should only have them on one, resulting in incorrect memory usage and corruption. This leads to potentially exploitable crashes. The issue only affects Firefox for Android, with other operating systems not being affected.

Recommendations: For versions prior to 51, update to version 51 or later to resolve the issue.

Exploitability

Fix

Impacts

Researchers

Honza Bambas

Vendors

Affected products

Weakness enumeration

CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer

Related identifiers

CVE-2017-5392