mozjs128 vulnerabilities (SUSE)
27 vulnerabilities.
-
mozjs128SUSE Heap buffer overflow vulnerability in libjxl 0.12.0 via crafted PBM images to the jxl::extras:... 7.3 High -
mozjs128SUSE Memory safety bugs fixed in Firefox ESR 115.27, Firefox ESR 128.14, Thunderbird ESR 128.14, Firefox ESR 140.2, Thunderbird ESR 140.2, Firefox 142 and Thunderbird 142 8.1 High -
mozjs128SUSE Uninitialized memory in the JavaScript Engine component 6.5 Medium -
mozjs128SUSE Same-origin policy bypass in the Graphics: Canvas2D component 8.1 High -
mozjs128SUSE Sandbox escape due to invalid pointer in the Audio/Video: GMP component 9.8 Critical -
mozjs128SUSE Memory safety bugs fixed in Firefox ESR 128.13, Thunderbird ESR 128.13, Firefox ESR 140.1, Thunderbird ESR 140.1, Firefox 141 and Thunderbird 141 8.8 High -
mozjs128SUSE Memory safety bugs fixed in Firefox ESR 115.26, Firefox ESR 128.13, Thunderbird ESR 128.13, Firefox ESR 140.1, Thunderbird ESR 140.1, Firefox 141 and Thunderbird 141 8.8 High -
mozjs128SUSE Incorrect JavaScript state machine for generators 6.5 Medium -
mozjs128SUSE XSLT documents could bypass CSP 8.1 High -
mozjs128SUSE Incorrect URL stripping in CSP reports 9.8 Critical -
mozjs128SUSE Potential user-assisted code execution in “Copy as cURL” command 8.1 High -
mozjs128SUSE javascript: URLs executed on object and embed tags 8.1 High -
mozjs128SUSE Large branch table could lead to truncated instruction 9.8 Critical -
mozjs128SUSE JavaScript engine only wrote partial return value to stack 6.5 Medium -
mozjs128SUSE Content-Disposition header ignored when a file is included in an embed or object tag 6.1 Medium -
mozjs128SUSE Incorrect parsing of URLs could have allowed embedding of youtube.com 6.5 Medium -
mozjs128SUSE No warning when opening executable terminal files on macOS 8.8 High -
mozjs128SUSE The WebCompat WebExtension shipped with Firefox exposed a persistent UUID 4.3 Medium -
mozjs128SUSE Use-after-free in FontFaceSet 9.8 Critical -
mozjs128SUSE Use after free in libvpx in Google Chrome prior to 137.0.7151.55 allowed a remote attacker to... 5.4 Medium -
mozjs128SUSE Memory safety bug fixed in Firefox ESR 128.11 and Thunderbird 128.11 8.1 High -
mozjs128SUSE Memory safety bugs fixed in Firefox 139, Thunderbird 139, Firefox ESR 128.11, and Thunderbird 128.11 8.1 High -
mozjs128SUSE Clickjacking vulnerability could have led to leaking saved payment card details 5.4 Medium -
mozjs128SUSE Script element events leaked cross-origin resource status 4.3 Medium -
mozjs128SUSE Potential local code execution in “Copy as cURL” command 4.8 Medium -
mozjs128SUSE Potential local code execution in “Copy as cURL” command 4.8 Medium -
mozjs128SUSE Error handling for script execution was incorrectly isolated from web content 4.3 Medium