CVE-2018-5093
High · 7.5CVSS
7.5
EPSS
19.4%
Published
Jun 11, 2018
CISA due date
—
The record
A heap buffer overflow vulnerability may occur in WebAssembly during Memory/Table resizing, resulting in a potentially exploitable crash. This vulnerability affects Firefox < 58.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Ubuntu:14.04:LTS | firefox | 0 | 58.0+build6-0ubuntu0.14.04.1 |
| Ubuntu:16.04:LTS | firefox | 0 | 58.0+build6-0ubuntu0.16.04.1 |
| Ubuntu:18.04:LTS | firefox | 0 | 59.0.1+build1-0ubuntu1 |
| Ubuntu:18.04:LTS | mozjs38 | 0 | No fix |
| Ubuntu:18.04:LTS | mozjs52 | 0 | No fix |
| Ubuntu:20.04:LTS | mozjs52 | 0 | No fix |
| Ubuntu:Pro:18.04:LTS | mozjs38 | 0 | No fix |
| Ubuntu:Pro:18.04:LTS | mozjs52 | 0 | No fix |
| Ubuntu:Pro:20.04:LTS | mozjs52 | 0 | No fix |
| openSUSE:Tumbleweed | MozillaFirefox | 0 | 92.0-1.2 |
| openSUSE:Tumbleweed | firefox-esr | 0 | 128.5.1-1.1 |
Related vulnerabilities
- CVE-2019-9810 Incorrect alias information in IonMonkey JIT compiler for Array.prototype.slice method… Also affects firefox
- CVE-2019-9788 Mozilla developers and community members reported memory safety bugs present in Firefox… Also affects firefox
- CVE-2019-9791 The type inference system allows the compilation of functions that can cause type… Also affects firefox
- CVE-2019-9792 The IonMonkey just-in-time (JIT) compiler can leak an internal JS_OPTIMIZED_OUT magic… Also affects firefox
- CVE-2018-18511 Cross-origin images can be read from a canvas element in violation of the same-origin… Also affects firefox
- CVE-2018-5124 Unsanitized output in the browser UI leaves HTML tags in place and can result in… Also affects firefox
- CVE-2018-12405 Mozilla developers and community members reported memory safety bugs present in Firefox… Also affects firefox
- CVE-2018-12388 Mozilla developers and community members reported memory safety bugs present in Firefox… Also affects firefox