Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-h74h-w4r7-rp9x

Опубликовано: 22 дек. 2022
Источник: github
Github: Не прошло ревью
CVSS3: 9.8

Описание

A malicious webpage could have caused an out-of-bounds write in WebGL, leading to memory corruption and a potentially exploitable crash. This vulnerability affects Thunderbird < 91.10, Firefox < 101, and Firefox ESR < 91.10.

A malicious webpage could have caused an out-of-bounds write in WebGL, leading to memory corruption and a potentially exploitable crash. This vulnerability affects Thunderbird < 91.10, Firefox < 101, and Firefox ESR < 91.10.

EPSS

Процентиль: 43%
0.00208
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-787

Связанные уязвимости

CVSS3: 9.8
ubuntu
больше 2 лет назад

A malicious webpage could have caused an out-of-bounds write in WebGL, leading to memory corruption and a potentially exploitable crash. This vulnerability affects Thunderbird < 91.10, Firefox < 101, and Firefox ESR < 91.10.

CVSS3: 9.8
redhat
около 3 лет назад

A malicious webpage could have caused an out-of-bounds write in WebGL, leading to memory corruption and a potentially exploitable crash. This vulnerability affects Thunderbird < 91.10, Firefox < 101, and Firefox ESR < 91.10.

CVSS3: 9.8
nvd
больше 2 лет назад

A malicious webpage could have caused an out-of-bounds write in WebGL, leading to memory corruption and a potentially exploitable crash. This vulnerability affects Thunderbird < 91.10, Firefox < 101, and Firefox ESR < 91.10.

CVSS3: 9.8
debian
больше 2 лет назад

A malicious webpage could have caused an out-of-bounds write in WebGL, ...

CVSS3: 7.5
fstec
около 3 лет назад

Уязвимость API для 3D-графики WebGL браузеров Firefox, Firefox ESR и почтового клиента Thunderbird, позволяющая нарушителю вызвать отказ в обслуживании

EPSS

Процентиль: 43%
0.00208
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-787