CVE-2017-7813 — Out-of-bounds Read in Mozilla Firefox
Severity
8.2HIGHNVD
OSV9.8
EPSS
0.6%
top 31.11%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedJun 11
Latest updateMay 13
Description
Inside the JavaScript parser, a cast of an integer to a narrower type can result in data read from outside the buffer being parsed. This usually results in a non-exploitable crash, but can leak a limited amount of information from memory if it matches JavaScript identifier syntax. This vulnerability affects Firefox < 56.
CVSS vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:HExploitability: 3.9 | Impact: 4.2
Affected Packages4 packages
🔴Vulnerability Details
4GHSA▶
GHSA-3q69-c555-hw23: Inside the JavaScript parser, a cast of an integer to a narrower type can result in data read from outside the buffer being parsed↗2022-05-13
OSV▶
CVE-2017-7813: Inside the JavaScript parser, a cast of an integer to a narrower type can result in data read from outside the buffer being parsed↗2017-10-02