Open Source Vulnerabilities

wireshark

In Wireshark 2

sentry

sentry

graphicsmagick

In GraphicsMagick 1

thunderbird, librewolf, librewolf, librewolf, librewolf, librewolf

Firefox behaved slightly differently for already known resources when loading CSS resources involving CSS variables

wireshark

In Wireshark 2

graphicsmagick

In ImageMagick 7

librewolf, librewolf, librewolf, librewolf, librewolf

Performance API did not properly hide the fact whether a request cross-origin resource has observed redirects

wireshark

In Wireshark 2

graphicsmagick

GraphicsMagick 1

thunderbird, librewolf, librewolf, librewolf, librewolf, librewolf

When reusing existing popups Firefox would have allowed them to cover the fullscreen notification UI, which could have enabled browser spoofing attacks

wireshark

In Wireshark 2

libexif

Heap-based buffer overflow in the exif_entry_fix function (aka the tag fixup routine) in libexif/exif-entry

graphicsmagick

GraphicsMagick 1

thunderbird, librewolf, librewolf, librewolf, librewolf, librewolf

Requests initiated through reader mode did not properly omit cookies with a SameSite attribute

wireshark

In Wireshark 2

libmaxminddb

libmaxminddb before 1

perl-encode

Encode

libexif

Integer overflow in the jpeg_data_load_data function in jpeg-data

graphicsmagick

GraphicsMagick 1

wireshark

In Wireshark 2

thunderbird, librewolf, librewolf, librewolf, librewolf, librewolf

improper implementation of the new iframe sandbox keyword <code>allow-top-navigation-by-user-activation</code> could lead to script execution without <code>allow-scripts</code> being present

libksba

vulnerability was found in the Libksba library due to an integer overflow within the CRL parser

libexif

Integer underflow in the exif_entry_get_value function in exif-entry

graphicsmagick

GraphicsMagick 1

wireshark

In Wireshark 2

librewolf, librewolf, librewolf, librewolf, librewolf

When closed or sent to the background, Firefox for Android would not properly record and persist HSTS settings

libexif

Off-by-one error in the exif_convert_utf16_to_utf8 function in exif-entry

graphicsmagick

GraphicsMagick 1

libksba

Libksba before 1

wireshark

In Wireshark 2

strongswan

ASN

libexif

mnote_olympus_entry_get_value function in olympus/mnote-olympus-entry

thunderbird, librewolf, librewolf, librewolf, librewolf, librewolf

Documents in deeply-nested cross-origin browsing contexts could have obtained permissions granted to the top-level origin, bypassing the existing prompt and wrongfully inheriting the top-level perm...

graphicsmagick

GraphicsMagick 1

wireshark

In Wireshark 2

strongswan

gmp plugin in strongSwan before 5

phpldapadmin

phpLDAPadmin through 1

libexif

exif_data_load_data function in exif-data

graphicsmagick

ReadJPEGImage function in coders/jpeg

thunderbird, librewolf, librewolf, librewolf, librewolf, librewolf

If an attacker was able to corrupt the methods of an Array object in JavaScript via prototype pollution, they could have achieved execution of attacker-controlled JavaScript code in a privileged co...

wireshark

In Wireshark 2

libexif

Buffer overflow in the exif_entry_format_value function in exif-entry

graphicsmagick

GraphicsMagick 1

strongswan

strongSwan 5

phpldapadmin

XSS issue has been discovered in phpLDAPadmin before 1

thunderbird, librewolf, librewolf, librewolf, librewolf, librewolf

attacker could have sent a message to the parent process where the contents were used to double-index into a JavaScript object, leading to prototype pollution and ultimately attacker-controlled Jav...

wireshark

In Wireshark 2

libexif

exif_convert_utf16_to_utf8 function in exif-entry

graphicsmagick

ReadOneJNGImage function in coders/png