CVE-2018-18504 — Out-of-bounds Read in Mozilla Firefox
Severity
9.8CRITICALNVD
EPSS
2.7%
top 14.01%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedFeb 5
Latest updateMay 14
Description
A crash and out-of-bounds read can occur when the buffer of a texture client is freed while it is still in use during graphic operations. This results is a potentially exploitable crash and the possibility of reading from the memory of the freed buffers. This vulnerability affects Firefox < 65.
CVSS vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HExploitability: 3.9 | Impact: 5.9
Affected Packages3 packages
Also affects: Ubuntu Linux 14.04, 16.04, 18.04, 18.10
🔴Vulnerability Details
3GHSA▶
GHSA-fp7v-m5c3-w328: A crash and out-of-bounds read can occur when the buffer of a texture client is freed while it is still in use during graphic operations↗2022-05-14
OSV▶
CVE-2018-18504: A crash and out-of-bounds read can occur when the buffer of a texture client is freed while it is still in use during graphic operations↗2019-01-30