Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-f333-vhwv-jvmx

Опубликовано: 18 мая 2025
Источник: github
Github: Не прошло ревью
CVSS3: 8.8

Описание

An attacker was able to perform an out-of-bounds read or write on a JavaScript object by confusing array index sizes. This vulnerability affects Firefox ESR < 115.23.1.

An attacker was able to perform an out-of-bounds read or write on a JavaScript object by confusing array index sizes. This vulnerability affects Firefox ESR < 115.23.1.

EPSS

Процентиль: 12%
0.00042
Низкий

8.8 High

CVSS3

Дефекты

CWE-125

Связанные уязвимости

CVSS3: 8.8
ubuntu
3 месяца назад

An attacker was able to perform an out-of-bounds read or write on a JavaScript object by confusing array index sizes. This vulnerability affects Firefox < 138.0.4, Firefox ESR < 128.10.1, Firefox ESR < 115.23.1, Thunderbird < 128.10.2, and Thunderbird < 138.0.2.

CVSS3: 8.8
redhat
3 месяца назад

An attacker was able to perform an out-of-bounds read or write on a JavaScript object by confusing array index sizes. This vulnerability affects Firefox < 138.0.4, Firefox ESR < 128.10.1, Firefox ESR < 115.23.1, Thunderbird < 128.10.2, and Thunderbird < 138.0.2.

CVSS3: 8.8
nvd
3 месяца назад

An attacker was able to perform an out-of-bounds read or write on a JavaScript object by confusing array index sizes. This vulnerability affects Firefox < 138.0.4, Firefox ESR < 128.10.1, Firefox ESR < 115.23.1, Thunderbird < 128.10.2, and Thunderbird < 138.0.2.

CVSS3: 8.8
debian
3 месяца назад

An attacker was able to perform an out-of-bounds read or write on a Ja ...

CVSS3: 8.8
fstec
3 месяца назад

Уязвимость браузеров Mozilla Firefox, Firefox ESR и почтового клиента Thunderbird, связанная с записью за границами буфера в памяти, позволяющая нарушителю выполнить произвольный код

EPSS

Процентиль: 12%
0.00042
Низкий

8.8 High

CVSS3

Дефекты

CWE-125