Описание
It was possible to mutate a JavaScript object so that the JIT could crash while tracing it. This vulnerability affects Firefox < 125.
It was possible to mutate a JavaScript object so that the JIT could crash while tracing it. This vulnerability affects Firefox < 125.
Связанные уязвимости
CVSS3: 7.5
ubuntu
больше 1 года назад
It was possible to mutate a JavaScript object so that the JIT could crash while tracing it. This vulnerability affects Firefox < 125.
CVSS3: 7.5
nvd
больше 1 года назад
It was possible to mutate a JavaScript object so that the JIT could crash while tracing it. This vulnerability affects Firefox < 125.
CVSS3: 7.5
debian
больше 1 года назад
It was possible to mutate a JavaScript object so that the JIT could cr ...
CVSS3: 4.3
fstec
больше 1 года назад
Уязвимость функции js::CheckTracedThing() JIT-компилятора браузера Mozilla Firefox, позволяющая нарушителю вызвать отказ в обслуживании