Уязвимость переполнения буфера кучи в методе WebGL "DrawElementsInstanced" при использовании с драйвером Mesa VM, позволяющая выполнить удалённый код и выход из песочницы
Описание
Метод WebGL DrawElementsInstanced подвержен уязвимости переполнения буфера кучи при использовании на системах с драйвером Mesa VM. Эта проблема может позволить злоумышленнику выполнить удалённый код и осуществить выход из песочницы.
Затронутые версии ПО
- Firefox ESR < 115.6
- Thunderbird < 115.6
- Firefox < 121
Тип уязвимости
- Переполнение буфера кучи (Heap Buffer Overflow)
- Удалённое выполнение кода (Remote Code Execution)
- Выход из песочницы (Sandbox Escape)
Ссылки
- Issue TrackingPermissions Required
- Mailing ListThird Party Advisory
- Mailing ListThird Party Advisory
- Third Party Advisory
- Third Party Advisory
- Third Party Advisory
- Vendor Advisory
- Vendor Advisory
- Vendor Advisory
- Issue TrackingPermissions Required
- Mailing ListThird Party Advisory
- Mailing ListThird Party Advisory
- Third Party Advisory
- Third Party Advisory
- Third Party Advisory
- Vendor Advisory
- Vendor Advisory
- Vendor Advisory
Уязвимые конфигурации
Одно из
Одно из
EPSS
8.8 High
CVSS3
Дефекты
Связанные уязвимости
The WebGL `DrawElementsInstanced` method was susceptible to a heap buffer overflow when used on systems with the Mesa VM driver. This issue could allow an attacker to perform remote code execution and sandbox escape. This vulnerability affects Firefox ESR < 115.6, Thunderbird < 115.6, and Firefox < 121.
The WebGL `DrawElementsInstanced` method was susceptible to a heap buffer overflow when used on systems with the Mesa VM driver. This issue could allow an attacker to perform remote code execution and sandbox escape. This vulnerability affects Firefox ESR < 115.6, Thunderbird < 115.6, and Firefox < 121.
The WebGL `DrawElementsInstanced` method was susceptible to a heap buffer overflow when used on systems with the Mesa VM driver. This issue could allow an attacker to perform remote code execution and sandbox escape. This vulnerability affects Firefox ESR < 115.6, Thunderbird < 115.6, and Firefox < 121.
The WebGL `DrawElementsInstanced` method was susceptible to a heap buf ...
The WebGL `DrawElementsInstanced` method was susceptible to a heap buffer overflow when used on systems with the Mesa VM driver. This issue could allow an attacker to perform remote code execution and sandbox escape. This vulnerability affects Firefox ESR < 115.6, Thunderbird < 115.6, and Firefox < 121.
EPSS
8.8 High
CVSS3