Out-of-bounds write in Mozilla Firefox
Mozilla developers reported memory safety bugs present in Firefox 85 and Firefox ESR 78.7.
firefox security update
Released 2021-02-24 · Red Hat rating Critical · View on Red Hat →
Mozilla developers reported memory safety bugs present in Firefox 85 and Firefox ESR 78.7.
When trying to load a cross-origin resource in an audio/video context a decoding error may have resulted, and the content of that error may have revealed information about the resource.
If Content Security Policy blocked frame navigation, the full destination of a redirect served in the frame was reported in the violation report; as opposed to the original frame URI.
As specified in the W3C Content Security Policy draft, when creating a violation report, "User agents need to ensure that the source file is the URL requested by the page, pre-redirects.