Vulnerabilities

Sites can bypass security checks on permissions to install lightweight themes by manipulating the "baseURI" property of the theme element.

An integer overflow can occur in the Skia library due to 32-bit integer use in an array without integer overflow checks, resulting in possible out-of-bounds writes.

A use-after-free vulnerability can occur while adjusting layout during SVG animations with text paths.

A use-after-free vulnerability can occur while enumerating attributes during SVG animations with clip paths.

Memory safety bugs were reported in Firefox 59, Firefox ESR 52.7, and Thunderbird 52.7.