Open Source Vulnerabilities

wireshark

In Wireshark 2

librewolf, librewolf, librewolf, librewolf, librewolf

Mozilla developers Kershaw Chang, Ryan VanderMeulen, and Randell Jesup reported memory safety bugs present in Firefox 97

graphicsmagick

DrawImage function in magick/render

wireshark

In Wireshark 2

thunderbird, librewolf, librewolf, librewolf, librewolf, librewolf

Mozilla developers and community members Nika Layzell, Andrew McCreight, Gabriele Svelto, and the Mozilla Fuzzing Team reported memory safety bugs present in Thunderbird 91

perl-email-address-list

email-ingestion feature in Best Practical Request Tracker 4

graphicsmagick

ReadWPGImage function in coders/wpg

wireshark

In Wireshark 2

librewolf, librewolf, librewolf, librewolf, librewolf

Mozilla developers and community members Randell Jesup, Sebastian Hengst, and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 98

graphicsmagick

GraphicsMagick 1

wireshark

In Wireshark 2

librewolf, librewolf, librewolf, librewolf, librewolf

In unusual circumstances, selecting text could cause text selection caching to behave incorrectly, leading to a crash

graphicsmagick

GraphicsMagick 1

wireshark

In Wireshark 2

thunderbird, librewolf, librewolf, librewolf, librewolf, librewolf

Due to a layout change, iframe contents could have been rendered outside of its border

graphicsmagick

In ReadOneJNGImage in coders/png

wireshark

In Wireshark 2

thunderbird, librewolf, librewolf, librewolf, librewolf, librewolf

When generating the assembly code for <code>MLoadTypedArrayElementHole</code>, an incorrect AliasSet was used

graphicsmagick

ReadGIFImage in coders/gif

wireshark

In Wireshark 2

librewolf, librewolf, librewolf, librewolf, librewolf

SVG's <code>&lt;use&gt;</code> element could have been used to load unexpected content that could have executed script in certain circumstances

graphicsmagick

ReadOneJNGImage in coders/png

wireshark

In Wireshark 2

librewolf, librewolf, librewolf, librewolf, librewolf

sourceMapURL feature in devtools was missing security checks that would have allowed a webpage to attempt to include local files or other files that should have been inaccessible

graphicsmagick

GraphicsMagick 1

giflib

There is a heap-buffer-overflow in GIFLIB 5

wireshark

In Wireshark 2

thunderbird, librewolf, librewolf, librewolf, librewolf, librewolf

By using a link with <code>rel="localization"</code> a use-after-free could have been triggered by destroying an object during JavaScript execution and then referencing the object through a freed p...

graphicsmagick

ReadDCMImage in coders/dcm

giflib

memory leak (out-of-memory) in gif2rgb in util/gif2rgb

wireshark

In Wireshark 2

graphicsmagick

ReadRLEImage in coders/rle

thunderbird, librewolf, librewolf, librewolf, librewolf, librewolf

If a compromised content process sent an unexpected number of WebAuthN Extensions in a Register command to the parent process, an out of bounds write would have occurred leading to memory corruptio...

giflib

Buffer Overflow vulnerability in GifLib Project GifLib v

wireshark

In Wireshark 2

graphicsmagick

ReadOneJNGImage in coders/png

giflib

giflib v5

wireshark

In Wireshark 2

graphicsmagick

ReadPNMImage in coders/pnm

wireshark

In Wireshark 2

nss, thunderbird, librewolf, librewolf, librewolf, librewolf, librewolf

<code>NSSToken</code> objects were referenced via direct points, and could have been accessed in an unsafe way on different threads, leading to a use-after-free and potentially exploitable crash

graphicsmagick

Off-by-one error in the DrawImage function in magick/render

wireshark

In Wireshark 2

librewolf, librewolf, librewolf, librewolf, librewolf

Mozilla developers Gabriele Svelto, Randell Jesup and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 99

graphicsmagick

There is an invalid free in the MagickFree function in magick/memory

wireshark

In Wireshark 2

thunderbird, librewolf, librewolf, librewolf, librewolf, librewolf

Mozilla developers Andrew McCreight, Gabriele Svelto, Tom Ritter and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 99 and Firefox ESR 91

graphicsmagick

There are lots of memory leaks in the GMCommand function in magick/command

sentry

sentry