Memory corruption in Mozilla Thunderbird ESR
Mozilla developers backported selected changes in the Skia library.
7 records
Mozilla developers backported selected changes in the Skia library.
A buffer overflow was found during UTF8 to Unicode string conversion within JavaScript with extremely large amounts of data.
Sites can bypass security checks on permissions to install lightweight themes by manipulating the "baseURI" property of the theme element.
An integer overflow can occur in the Skia library due to 32-bit integer use in an array without integer overflow checks, resulting in possible out-of-bounds writes.
A use-after-free vulnerability can occur while adjusting layout during SVG animations with text paths.
A use-after-free vulnerability can occur while enumerating attributes during SVG animations with clip paths.
Memory safety bugs were reported in Firefox 59, Firefox ESR 52.7, and Thunderbird 52.7.