Vulnerabilities

Memory safety bugs present in Firefox 127, Firefox ESR 115.12, and Thunderbird 115.12.

In an out-of-memory scenario an allocation could fail but free would have been called on the pointer afterwards leading to memory corruption.

A mismatch between allocator and deallocator could have led to memory corruption.

A race condition could lead to a cross-origin container obtaining permissions of the top-level origin.

Due to large allocation checks in Angle for GLSL shaders being too lenient an out-of-bounds access could occur when allocating more than 8192 ints in private shader memory on macOS.