Vulnerabilities

Uninitialized memory in a canvas object could have caused an incorrect free() leading to memory corruption and a potentially exploitable crash.

Instruction reordering resulted in a sequence of instructions that would cause an object to be incorrectly considered during garbage collection.

A use-after-free vulnerability in media channels could have led to memory corruption and a potentially exploitable crash.

A suspected race condition when calling getaddrinfo led to memory corruption and a potentially exploitable crash.

Firefox incorrectly treated an inline list-item element as a block element, resulting in an out of bounds read or memory corruption, and a potentially exploitable crash.