Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-4x64-w698-xf5g

Опубликовано: 02 июн. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 8.8

Описание

While implementing AudioWorklets, some code may have casted one type to another, invalid, dynamic type. This could have led to a potentially exploitable crash. This vulnerability affects Firefox < 111, Firefox ESR < 102.9, and Thunderbird < 102.9.

While implementing AudioWorklets, some code may have casted one type to another, invalid, dynamic type. This could have led to a potentially exploitable crash. This vulnerability affects Firefox < 111, Firefox ESR < 102.9, and Thunderbird < 102.9.

EPSS

Процентиль: 33%
0.00123
Низкий

8.8 High

CVSS3

Дефекты

CWE-704
CWE-843

Связанные уязвимости

CVSS3: 8.8
ubuntu
около 2 лет назад

While implementing AudioWorklets, some code may have casted one type to another, invalid, dynamic type. This could have led to a potentially exploitable crash. This vulnerability affects Firefox < 111, Firefox ESR < 102.9, and Thunderbird < 102.9.

CVSS3: 6.5
redhat
больше 2 лет назад

While implementing AudioWorklets, some code may have casted one type to another, invalid, dynamic type. This could have led to a potentially exploitable crash. This vulnerability affects Firefox < 111, Firefox ESR < 102.9, and Thunderbird < 102.9.

CVSS3: 8.8
nvd
около 2 лет назад

While implementing AudioWorklets, some code may have casted one type to another, invalid, dynamic type. This could have led to a potentially exploitable crash. This vulnerability affects Firefox < 111, Firefox ESR < 102.9, and Thunderbird < 102.9.

CVSS3: 8.8
debian
около 2 лет назад

While implementing AudioWorklets, some code may have casted one type t ...

CVSS3: 7.4
fstec
больше 2 лет назад

Уязвимость интерфейса AudioWorklet браузеров Mozilla Firefox, Firefox ESR и почтового клиента Thunderbird, позволяющая нарушителю вызвать отказ в обслуживании

EPSS

Процентиль: 33%
0.00123
Низкий

8.8 High

CVSS3

Дефекты

CWE-704
CWE-843