A crash and out-of-bounds read can occur when the buffer of a texture client is freed while it is still in use during graphic operations. This results is a potentially exploitable crash and the possibility of reading from the memory of the freed buffers. This vulnerability affects Firefox < 65.
The product reads data past the end, or before the beginning, of the intended buffer.
| Link | Tags |
|---|---|
| https://www.mozilla.org/security/advisories/mfsa2019-01/ | vendor advisory |
| http://www.securityfocus.com/bid/106773 | vdb entry third party advisory |
| https://usn.ubuntu.com/3874-1/ | third party advisory vendor advisory |