PT-2019-1342

CVE-2018-18504

·

Published

2019-01-29

·

Updated

2024-12-12

Description by

CVSS 3.1
9.8
Critical
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Firefox versions prior to 65
Description The issue is caused by a buffer overflow in the Texture Client Handler component of the Firefox browser, allowing a remote attacker to potentially cause a denial of service using a specially crafted web page. It can also lead to a crash and out-of-bounds read when a texture client's buffer is freed while still in use during graphic operations, potentially allowing the reading of memory from freed buffers.
Recommendations For versions prior to 65, update to version 65 or later to resolve the issue. As a temporary workaround, consider restricting the use of graphic-intensive operations until a patch is applied.
Exploitability
Fix
Impacts
Researchers
Vendors
Affected products
Weakness enumeration
Related identifiers
ALT-PU-2019-1173
ALT-PU-2019-2324
ALT-PU-2019-2486
OPENSUSE-SU-2024:10600-1
OPENSUSE-SU-2024:14572-1
USN-3874-1
Found an issue in the description? Have something to add? Feel free to write us 👾