Open Source Vulnerabilities

metaflow-service-fips

metaflow-service-fips

thunderbird, librewolf, librewolf, librewolf, librewolf, librewolf

Malicious websites could have tricked users into accepting launching a program to handle an external URL protocol

graphicsmagick

memory allocation failure was discovered in the ReadPNMImage function in coders/pnm

mruby

NULL Pointer Dereference in Homebrew mruby prior to 3

graphicsmagick

In GraphicsMagick 1

thunderbird, librewolf, librewolf, librewolf, librewolf, librewolf

Applying a CSS filter effect could have accessed out of bounds memory

mruby

Heap-based Buffer Overflow in Homebrew mruby prior to 3

graphicsmagick

GraphicsMagick 1

mruby

NULL Pointer Dereference in Homebrew mruby prior to 3

thunderbird, librewolf, librewolf, librewolf, librewolf, librewolf

Constructing audio sinks could have lead to a race condition when playing audio files and closing windows

thunderbird, librewolf, librewolf, librewolf, librewolf, librewolf, swayr

regex is an implementation of regular expressions for the Rust language

mruby

NULL Pointer Dereference in Homebrew mruby prior to 3

librewolf, librewolf, librewolf, librewolf, librewolf

If Firefox was installed to a world-writable directory, a local privilege escalation could occur when Firefox searched the current directory for system libraries

graphicsmagick

issue was discovered in GraphicsMagick 1

librewolf, librewolf, librewolf, librewolf, librewolf

Mozilla developers and community members Gabriele Svelto, Sebastian Hengst, Randell Jesup, Luan Herrera, Lars T Hansen, and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 96

mruby

mruby is vulnerable to NULL Pointer Dereference

graphicsmagick

issue was discovered in GraphicsMagick 1

mruby

mruby is vulnerable to Heap-based Buffer Overflow

graphicsmagick

issue was discovered in GraphicsMagick 1

thunderbird, librewolf, librewolf, librewolf, librewolf, librewolf

It was possible to construct specific XSLT markup that would be able to bypass an iframe sandbox

wireshark

epan/dissectors/packet-wbxml

mruby

mruby is vulnerable to NULL Pointer Dereference

graphicsmagick

ReadOneJNGImage and ReadJNGImage functions in coders/png

thunderbird, librewolf, librewolf, librewolf, librewolf, librewolf

unexpected message in the WebGPU IPC framework could lead to a use-after-free and exploitable sandbox escape

wireshark

epan/dissectors/packet-wap

mruby

mruby is vulnerable to NULL Pointer Dereference

graphicsmagick

issue was discovered in GraphicsMagick 1

thunderbird, librewolf, librewolf, librewolf, librewolf, librewolf

Removing an XSLT parameter during processing could have lead to an exploitable use-after-free

wireshark

epan/proto

graphicsmagick

In GraphicsMagick 1

librewolf, librewolf, librewolf, librewolf, librewolf

When installing an add-on, Firefox verified the signature before prompting the user; but while the user was confirming the prompt, the underlying add-on file could have been modified and Firefox wo...

wireshark

Off-by-one error in epan/dissectors/packet-rlc

graphicsmagick

In GraphicsMagick 1

librewolf, librewolf, librewolf, librewolf, librewolf

In unusual circumstances, an individual thread may outlive the thread's manager during shutdown

wireshark

epan/dissectors/packet-ldss

graphicsmagick

ReadGRAYImage in coders/gray

wireshark

epan/dissectors/packet-rlc

thunderbird, librewolf, librewolf, librewolf, librewolf, librewolf

If an attacker could control the contents of an iframe sandboxed with <code>allow-popups</code> but not <code>allow-scripts</code>, they were able to craft a link that, when clicked, would lead to ...

graphicsmagick

ReadCMYKImage in coders/cmyk

wireshark

epan/dissectors/packet-wsp

thunderbird, librewolf, librewolf, librewolf, librewolf, librewolf

When resizing a popup after requesting fullscreen access, the popup would not display the fullscreen notification

graphicsmagick

WriteOnePNGImage in coders/png

wireshark

epan/dissectors/packet-packetbb

librewolf, librewolf, librewolf, librewolf, librewolf

While the text displayed in Autofill tooltips cannot be directly read by JavaScript, the text was rendered using page fonts

graphicsmagick

ReadRGBImage in coders/rgb

wireshark

In Wireshark 2

graphicsmagick

WritePNMImage in coders/pnm

thunderbird, librewolf, librewolf, librewolf, librewolf, librewolf

attacker could have caused a use-after-free by forcing a text reflow in an SVG object leading to a potentially exploitable crash

graphicsmagick

coders/wpg