Vulnerabilities

Under certain circumstances the "fetch()" API can return transient local copies of resources that were sent with a "no-store" or "no-cache" cache header instead of downloading a copy from the network as it should.

When packets with a mismatched RTP payload type are sent in WebRTC connections, in some circumstances a potentially exploitable crash is triggered.

A lack of parameter validation on IPC messages results in a potential out-of-bounds write through malformed IPC messages.

A buffer overflow can occur when manipulating the SVG "animatedPathSegList" through script.

Memory safety bugs were reported in Firefox 58 and Firefox ESR 52.6.