Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-r83v-rmq7-r5m4

Опубликовано: 04 мар. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 6.5

Описание

When String.toUpperCase() caused a string to get longer it was possible for uninitialized memory to be incorporated into the result string This vulnerability affects Firefox < 136.

When String.toUpperCase() caused a string to get longer it was possible for uninitialized memory to be incorporated into the result string This vulnerability affects Firefox < 136.

EPSS

Процентиль: 32%
0.00119
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-908

Связанные уязвимости

CVSS3: 9.8
ubuntu
5 месяцев назад

When String.toUpperCase() caused a string to get longer it was possible for uninitialized memory to be incorporated into the result string This vulnerability affects Firefox < 136 and Thunderbird < 136.

CVSS3: 6.3
redhat
5 месяцев назад

When String.toUpperCase() caused a string to get longer it was possible for uninitialized memory to be incorporated into the result string This vulnerability affects Firefox < 136 and Thunderbird < 136.

CVSS3: 9.8
nvd
5 месяцев назад

When String.toUpperCase() caused a string to get longer it was possible for uninitialized memory to be incorporated into the result string This vulnerability affects Firefox < 136 and Thunderbird < 136.

CVSS3: 9.8
debian
5 месяцев назад

When String.toUpperCase() caused a string to get longer it was possibl ...

CVSS3: 6.3
fstec
5 месяцев назад

Уязвимость функции String.toUpperCase() браузера Mozilla Firefox и почтового клиента Thunderbird, позволяющая нарушителю выполнить произвольный код

EPSS

Процентиль: 32%
0.00119
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-908