Due to large allocation checks in Angle for GLSL shaders being too lenient an out-of-bounds access could occur when allocating more than 8192 ints in private shader memory on mac OS. This vulnerability affects Firefox < 128, Firefox ESR < 115.13, Thunderbird < 115.13, and Thunderbird < 128.
The product allocates a reusable resource or group of resources on behalf of an actor without imposing any restrictions on the size or number of resources that can be allocated, in violation of the intended security policy for that actor.
| Link | Tags |
|---|---|
| https://bugzilla.mozilla.org/show_bug.cgi?id=1888340 | issue tracking |
| https://www.mozilla.org/security/advisories/mfsa2024-29/ | vendor advisory |
| https://www.mozilla.org/security/advisories/mfsa2024-30/ | vendor advisory |
| https://www.mozilla.org/security/advisories/mfsa2024-31/ | vendor advisory |
| https://www.mozilla.org/security/advisories/mfsa2024-32/ | vendor advisory |