Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-r83v-rmq7-r5m4

Опубликовано: 04 мар. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 6.5

Описание

When String.toUpperCase() caused a string to get longer it was possible for uninitialized memory to be incorporated into the result string This vulnerability affects Firefox < 136.

When String.toUpperCase() caused a string to get longer it was possible for uninitialized memory to be incorporated into the result string This vulnerability affects Firefox < 136.

EPSS

Процентиль: 29%
0.00099
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-908

Связанные уязвимости

CVSS3: 9.8
ubuntu
4 месяца назад

When String.toUpperCase() caused a string to get longer it was possible for uninitialized memory to be incorporated into the result string This vulnerability affects Firefox < 136 and Thunderbird < 136.

CVSS3: 6.3
redhat
4 месяца назад

When String.toUpperCase() caused a string to get longer it was possible for uninitialized memory to be incorporated into the result string This vulnerability affects Firefox < 136 and Thunderbird < 136.

CVSS3: 9.8
nvd
4 месяца назад

When String.toUpperCase() caused a string to get longer it was possible for uninitialized memory to be incorporated into the result string This vulnerability affects Firefox < 136 and Thunderbird < 136.

CVSS3: 9.8
debian
4 месяца назад

When String.toUpperCase() caused a string to get longer it was possibl ...

CVSS3: 6.3
fstec
4 месяца назад

Уязвимость функции String.toUpperCase() браузера Mozilla Firefox и почтового клиента Thunderbird, позволяющая нарушителю выполнить произвольный код

EPSS

Процентиль: 29%
0.00099
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-908