Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-r83v-rmq7-r5m4

Опубликовано: 04 мар. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 6.5

Описание

When String.toUpperCase() caused a string to get longer it was possible for uninitialized memory to be incorporated into the result string This vulnerability affects Firefox < 136.

When String.toUpperCase() caused a string to get longer it was possible for uninitialized memory to be incorporated into the result string This vulnerability affects Firefox < 136.

EPSS

Процентиль: 38%
0.00465
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-908

Связанные уязвимости

CVSS3: 9.8
ubuntu
больше 1 года назад

When String.toUpperCase() caused a string to get longer it was possible for uninitialized memory to be incorporated into the result string. This vulnerability was fixed in Firefox 136 and Thunderbird 136.

CVSS3: 6.3
redhat
больше 1 года назад

When String.toUpperCase() caused a string to get longer it was possible for uninitialized memory to be incorporated into the result string. This vulnerability was fixed in Firefox 136 and Thunderbird 136.

CVSS3: 9.8
nvd
больше 1 года назад

When String.toUpperCase() caused a string to get longer it was possible for uninitialized memory to be incorporated into the result string. This vulnerability was fixed in Firefox 136 and Thunderbird 136.

CVSS3: 9.8
debian
больше 1 года назад

When String.toUpperCase() caused a string to get longer it was possibl ...

CVSS3: 6.3
fstec
больше 1 года назад

Уязвимость функции String.toUpperCase() браузера Mozilla Firefox и почтового клиента Thunderbird, позволяющая нарушителю выполнить произвольный код

EPSS

Процентиль: 38%
0.00465
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-908