Vulnerabilities

A potential vulnerability leading to an integer overflow can occur during buffer size calculations for images when a raw value is used instead of the checked value.

A same-origin policy violation allowing the theft of cross-origin URL entries when using the Javascript location property to cause a redirection to another site using performance.getEntries().

A buffer overflow can occur in the Skia library during buffer offset calculations with hardware accelerated canvas 2D actions due to the use of 32-bit calculations instead of 64-bit.

A use-after-free vulnerability can occur after deleting a selection element due to a weak reference to the select element in the options collection.

Mozilla developers and community members reported memory safety bugs present in Firefox 63 and Firefox ESR 60.3.