CVE-2018-18503 (NVD)

2019-02-05

When JavaScript is used to create and manipulate an audio buffer, a potentially exploitable crash may occur because of a compartment mismatch in some situations. This vulnerability affects Firefox < 65.

Products Ubuntu_linux, Firefox
Type Improper Restriction of Operations within the Bounds of a Memory Buffer (CWE-119)
First patch - None (likely due to unavailable code)
Links http://www.securityfocus.com/bid/106773
https://www.mozilla.org/security/advisories/mfsa2019-01/
https://usn.ubuntu.com/3874-1/