CVE-2018-12371 - Mozilla: Integer overflow in Skia library during edge builder allocation

Back Back to CVE browser

HIGH

Mozilla: Integer overflow in Skia library during edge builder allocation

Published Jul 9, 2020

8.8

HIGH

CVSS 3.1

EPSS 1.45%

Description

An integer overflow vulnerability in the Skia library when allocating memory for edge builders on some systems with at least 16 GB of RAM. This results in the use of uninitialized memory, resulting in a potentially exploitable crash. This vulnerability affects Firefox ESR < 60.1, Thunderbird < 60, and Firefox < 61.

Affected products

Vendor Mozilla Product Firefox Default
n/a
- Version
  unspecified
  Status
  affected
  Constraints
  <61
Vendor Mozilla Product Firefox ESR Default
n/a
- Version
  unspecified
  Status
  affected
  Constraints
  <60.1
Vendor Mozilla Product Thunderbird Default
n/a
- Version
  unspecified
  Status
  affected
  Constraints
  <60

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Mozilla

Firefox

n/a

Version	Status	Constraints
unspecified	affected	<61

Mozilla

Firefox ESR

n/a

Version	Status	Constraints
unspecified	affected	<60.1

Mozilla

Thunderbird

n/a

Version	Status	Constraints
unspecified	affected	<60

Red Hat Enterprise Linux 6

firefox

Not affected
Red Hat Enterprise Linux 6

thunderbird

Not affected
Red Hat Enterprise Linux 7

firefox

Not affected
Red Hat Enterprise Linux 7

thunderbird

Not affected

Product	Package	State	Advisory
Red Hat Enterprise Linux 6	firefox	Not affected	n/a
Red Hat Enterprise Linux 6	thunderbird	Not affected	n/a
Red Hat Enterprise Linux 7	firefox	Not affected	n/a
Red Hat Enterprise Linux 7	thunderbird	Not affected	n/a

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-190

Integer Overflow

References (9)

https://access.redhat.com/security/cve/CVE-2018-12371
Vendor Advisory
https://bugzilla.mozilla.org/show_bug.cgi?id=1465686
x_refsource_MISCExploitIssue TrackingPatchVendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1595036
Issue Tracking
https://nvd.nist.gov/vuln/detail/CVE-2018-12371
https://www.cve.org/CVERecord?id=CVE-2018-12371
https://www.mozilla.org/en-US/security/advisories/mfsa2018-16/#CVE-2018-12371
https://www.mozilla.org/security/advisories/mfsa2018-15/
x_refsource_MISCVendor Advisory
https://www.mozilla.org/security/advisories/mfsa2018-16/
x_refsource_MISCVendor Advisory
https://www.mozilla.org/security/advisories/mfsa2018-19/
x_refsource_MISCVendor Advisory

Link	Providers	Tags
https://access.redhat.com/security/cve/CVE-2018-12371		Vendor Advisory
https://bugzilla.mozilla.org/show_bug.cgi?id=1465686		x_refsource_MISCExploitIssue TrackingPatchVendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1595036		Issue Tracking
https://nvd.nist.gov/vuln/detail/CVE-2018-12371
https://www.cve.org/CVERecord?id=CVE-2018-12371
https://www.mozilla.org/en-US/security/advisories/mfsa2018-16/#CVE-2018-12371
https://www.mozilla.org/security/advisories/mfsa2018-15/		x_refsource_MISCVendor Advisory
https://www.mozilla.org/security/advisories/mfsa2018-16/		x_refsource_MISCVendor Advisory
https://www.mozilla.org/security/advisories/mfsa2018-19/		x_refsource_MISCVendor Advisory