Open Source Vulnerabilities
thunderbird, librewolf, librewolf, librewolf, librewolf, librewolf
On arm64, WASM code could have resulted in incorrect assembly generation leading to a register allocation problem, and a potentially exploitable crash
thunderbird/ librewolf/ librewolf/ librewolf/ librewolf/ librewolf
On arm64, WASM code could have resulted in incorrect assembly generation leading to a register allocation problem, and a potentially exploitable crash
graphicsmagick
In ImageMagick before 7
libexif
issue was discovered in libexif before 0
openssl1.1-compat, libressl, lighthouse, lighthouse, libretls
BN_mod_sqrt() function, which computes a modular square root, contains a bug that can cause it to loop forever for non-prime moduli
openssl1.1-compat/ libressl/ lighthouse/ lighthouse/ libretls
BN_mod_sqrt() function, which computes a modular square root, contains a bug that can cause it to loop forever for non-prime moduli
thunderbird, librewolf, librewolf, librewolf, librewolf, librewolf
When downloading files on Windows, the % character was not escaped, which could have lead to a download incorrectly being saved to attacker-influenced paths that used variables such as %HOMEPATH% o...
thunderbird/ librewolf/ librewolf/ librewolf/ librewolf/ librewolf
When downloading files on Windows, the % character was not escaped, which could have lead to a download incorrectly being saved to attacker-influenced paths that used variables such as %HOMEPATH% o...
graphicsmagick
In GraphicsMagick 1
libexif
error when processing the EXIF_IFD_INTEROPERABILITY and EXIF_IFD_EXIF tags within libexif version 0
libexif
error when processing the EXIF_IFD_INTEROPERABILITY and EXIF_IFD_EXIF tags within libexif version 0
strongswan
strongSwan before 5
graphicsmagick
There is a memory leak in the function WriteMSLImage of coders/msl
graphicsmagick
There is a memory leak in the function WriteMSLImage of coders/msl
thunderbird, librewolf, librewolf, librewolf, librewolf, librewolf
When exiting fullscreen mode, an iframe could have confused the browser about the current state of fullscreen, resulting in potential user confusion or spoofing attacks
thunderbird/ librewolf/ librewolf/ librewolf/ librewolf/ librewolf
When exiting fullscreen mode, an iframe could have confused the browser about the current state of fullscreen, resulting in potential user confusion or spoofing attacks
libexif
In exif_entry_get_value of exif-entry
graphicsmagick
GraphicsMagick before 1
thunderbird, librewolf, librewolf, librewolf, librewolf, librewolf
malicious webpage could have caused an out-of-bounds write in WebGL, leading to memory corruption and a potentially exploitable crash
thunderbird/ librewolf/ librewolf/ librewolf/ librewolf/ librewolf
malicious webpage could have caused an out-of-bounds write in WebGL, leading to memory corruption and a potentially exploitable crash
libexif
In exif_data_load_data_content of exif-data
graphicsmagick
GraphicsMagick through 1
thunderbird, librewolf, librewolf, librewolf, librewolf, librewolf
malicious website could have learned the size of a cross-origin resource that supported Range requests
thunderbird/ librewolf/ librewolf/ librewolf/ librewolf/ librewolf
malicious website could have learned the size of a cross-origin resource that supported Range requests
librewolf, librewolf, librewolf, librewolf, librewolf
Use after free in Codecs in Google Chrome prior to 101
librewolf/ librewolf/ librewolf/ librewolf/ librewolf
Use after free in Codecs in Google Chrome prior to 101
graphicsmagick
In GraphicsMagick, a heap buffer overflow was found when parsing MIFF
graphicsmagick
In GraphicsMagick, a heap buffer overflow was found when parsing MIFF
librewolf, librewolf, librewolf, librewolf, librewolf
Mozilla developers Bryce Seager van Dyk and the Mozilla Fuzzing Team reported potential vulnerabilities present in Firefox 101
librewolf/ librewolf/ librewolf/ librewolf/ librewolf
Mozilla developers Bryce Seager van Dyk and the Mozilla Fuzzing Team reported potential vulnerabilities present in Firefox 101
tinc
Missing message authentication in the meta-protocol in Tinc VPN version 1
tinc
Missing message authentication in the meta-protocol in Tinc VPN version 1
qt5-qtwebengine
Out of bounds read in IPC in Google Chrome prior to 89
qt5-qtwebengine
Out of bounds read in IPC in Google Chrome prior to 89
thunderbird, thunderbird, librewolf, librewolf, librewolf, librewolf, librewolf
Mozilla Fuzzing Team reported potential vulnerabilities present in Thunderbird 91
thunderbird/ thunderbird/ librewolf/ librewolf/ librewolf/ librewolf/ librewolf
Mozilla Fuzzing Team reported potential vulnerabilities present in Thunderbird 91
qt5-qtwebengine
Use after free in V8 in Google Chrome prior to 89
qt5-qtwebengine
Use after free in V8 in Google Chrome prior to 89
librewolf, librewolf, librewolf, librewolf, librewolf
attacker who could have convinced a user to drag and drop an image to a filesystem could have manipulated the resulting filename to contain an executable extension, and by extension potentially tri...
librewolf/ librewolf/ librewolf/ librewolf/ librewolf
attacker who could have convinced a user to drag and drop an image to a filesystem could have manipulated the resulting filename to contain an executable extension, and by extension potentially tri...
musl
Multiple integer overflows in the TRE library and musl libc allow attackers to cause memory corruption via a large number of (1) states or (2) tags, which triggers an out-of-bounds write
musl
Multiple integer overflows in the TRE library and musl libc allow attackers to cause memory corruption via a large number of (1) states or (2) tags, which triggers an out-of-bounds write
