Open Source Vulnerabilities

live-media

Live555 through 1

ntfs-3g

ntfsck in NTFS-3G through 2021

librewolf, librewolf, librewolf, librewolf, librewolf

When using certain blank characters in a URL, they where incorrectly rendered as spaces instead of an encoded URL

webkit2gtk

Multiple memory corruption issues were addressed with improved memory handling

libmspack

issue was discovered in mspack/chmd

live-media

Live555 through 1

librewolf, librewolf, librewolf, librewolf, librewolf

When browsing a document hosted on an IP address, an attacker could insert certain characters to flip domain and path information in the address bar

ntfs-3g

buffer overflow was discovered in NTFS-3G before 2022

webkit2gtk

Multiple memory corruption issues were addressed with improved memory handling

libmspack

issue was discovered in mspack/chmd

live-media

Live555 through 1

librewolf, librewolf, librewolf, librewolf, librewolf

Mozilla Developer Nicolas Silva found that when using WebRender, Firefox would under certain conditions leak arbitrary GPU memory to the visible screen

webkit2gtk

Multiple memory corruption issues were addressed with improved memory handling

libmspack

chmextract

thunderbird, librewolf, librewolf, librewolf, librewolf, librewolf

Mozilla Developer Iain Ireland discovered a missing type check during unboxed objects removal, resulting in a crash

webkit2gtk

Multiple memory corruption issues were addressed with improved memory handling

libmspack

chmd_read_headers in mspack/chmd

mini_httpd

htpasswd implementation of mini_httpd before v1

webkit2gtk

Multiple memory corruption issues were addressed with improved memory handling

squashfs-tools

squashfs_opendir in unsquash-1

thunderbird, librewolf, librewolf, librewolf, librewolf, librewolf

When browsing a malicious page, a race condition in our SharedWorkerService could occur and lead to a potentially exploitable crash

libmspack

In mspack/cab

mini_httpd

ACME mini_httpd before 1

webkit2gtk

Multiple memory corruption issues were addressed with improved memory handling

recutils

Use-After-Free vulnerability in rec_mset_elem_destroy() at rec-mset

squashfs-tools

squashfs_opendir in unsquash-2

thunderbird, librewolf, librewolf, librewolf, librewolf, librewolf

NSS has shown timing differences when performing DSA signatures, which was exploitable and could eventually leak private keys

libmspack

libmspack 0

webkit2gtk

Multiple memory corruption issues were addressed with improved memory handling

recutils

untrusted pointer dereference in rec_db_destroy() at rec-db

librewolf, librewolf, librewolf, librewolf, librewolf

Mozilla developers and community members reported memory safety bugs present in Firefox 77

webkit2gtk

Multiple memory corruption issues were addressed with improved memory handling

librewolf, librewolf, librewolf, librewolf, librewolf

Due to confusion processing a hyphen character in Date

webkit2gtk

Multiple memory corruption issues were addressed with improved memory handling

librewolf, librewolf, librewolf, librewolf, librewolf

When constructing a permission prompt for WebRTC, a URI was supplied from the content process

webkit2gtk

Multiple memory corruption issues were addressed with improved memory handling

librewolf, librewolf, librewolf, librewolf, librewolf

When the Windows DLL "webauthn

webkit2gtk

logic issue was addressed with improved state management

librewolf, librewolf, librewolf, librewolf, librewolf

In non-standard configurations, a JPEG image created by JavaScript could have caused an internal variable to overflow, resulting in an out of bounds write, memory corruption, and a potentially expl...

nbd

In nbd-server in nbd before 3

webkit2gtk

logic issue existed in the handling of synchronous page loads

ldns

double-free vulnerability in str2host

nbd

In nbd-server in nbd before 3

thunderbird, librewolf, librewolf, librewolf, librewolf, librewolf

When performing add-on updates, certificate chains terminating in non-built-in-roots were rejected (even if they were legitimately added by an administrator

webkit2gtk

Multiple memory corruption issues were addressed with improved memory handling

ldns

double-free vulnerability in parse

spice

vulnerability was discovered in SPICE before 0

nss, librewolf, librewolf, librewolf, librewolf, librewolf

During RSA key generation, bignum implementations used a variation of the Binary Extended Euclidean Algorithm which entailed significantly input-dependent flow

webkit2gtk

Multiple memory corruption issues were addressed with improved memory handling

spice

vulnerability was discovered in SPICE before 0