mozjs128 vulnerabilities (openSUSE)
83 vulnerabilities.
-
mozjs128openSUSE Heap buffer overflow vulnerability in libjxl 0.12.0 via crafted PBM images to the jxl::extras:... 7.3 High -
mozjs128openSUSE LZ4 through 1.10.0 allows attackers to cause a denial of service (application crash) or possibly... 5.9 Medium -
mozjs128openSUSE Memory safety bugs fixed in Firefox ESR 115.27, Firefox ESR 128.14, Thunderbird ESR 128.14, Firefox ESR 140.2, Thunderbird ESR 140.2, Firefox 142 and Thunderbird 142 8.1 High -
mozjs128openSUSE Uninitialized memory in the JavaScript Engine component 6.5 Medium -
mozjs128openSUSE Same-origin policy bypass in the Graphics: Canvas2D component 8.1 High -
mozjs128openSUSE Sandbox escape due to invalid pointer in the Audio/Video: GMP component 9.8 Critical -
mozjs128openSUSE Memory safety bugs fixed in Firefox ESR 128.13, Thunderbird ESR 128.13, Firefox ESR 140.1, Thunderbird ESR 140.1, Firefox 141 and Thunderbird 141 8.8 High -
mozjs128openSUSE Memory safety bugs fixed in Firefox ESR 115.26, Firefox ESR 128.13, Thunderbird ESR 128.13, Firefox ESR 140.1, Thunderbird ESR 140.1, Firefox 141 and Thunderbird 141 8.8 High -
mozjs128openSUSE Incorrect JavaScript state machine for generators 6.5 Medium -
mozjs128openSUSE XSLT documents could bypass CSP 8.1 High -
mozjs128openSUSE Incorrect URL stripping in CSP reports 9.8 Critical -
mozjs128openSUSE Potential user-assisted code execution in “Copy as cURL” command 8.1 High -
mozjs128openSUSE javascript: URLs executed on object and embed tags 8.1 High -
mozjs128openSUSE Large branch table could lead to truncated instruction 9.8 Critical -
mozjs128openSUSE JavaScript engine only wrote partial return value to stack 6.5 Medium -
mozjs128openSUSE Content-Disposition header ignored when a file is included in an embed or object tag 6.1 Medium -
mozjs128openSUSE Incorrect parsing of URLs could have allowed embedding of youtube.com 6.5 Medium -
mozjs128openSUSE No warning when opening executable terminal files on macOS 8.8 High -
mozjs128openSUSE The WebCompat WebExtension shipped with Firefox exposed a persistent UUID 4.3 Medium -
mozjs128openSUSE Use-after-free in FontFaceSet 9.8 Critical -
mozjs128openSUSE Use after free in libvpx in Google Chrome prior to 137.0.7151.55 allowed a remote attacker to... 5.4 Medium -
mozjs128openSUSE Memory safety bug fixed in Firefox ESR 128.11 and Thunderbird 128.11 8.1 High -
mozjs128openSUSE Memory safety bugs fixed in Firefox 139, Thunderbird 139, Firefox ESR 128.11, and Thunderbird 128.11 8.1 High -
mozjs128openSUSE Clickjacking vulnerability could have led to leaking saved payment card details 5.4 Medium -
mozjs128openSUSE Script element events leaked cross-origin resource status 4.3 Medium -
mozjs128openSUSE Potential local code execution in “Copy as cURL” command 4.8 Medium -
mozjs128openSUSE Potential local code execution in “Copy as cURL” command 4.8 Medium -
mozjs128openSUSE Error handling for script execution was incorrectly isolated from web content 4.3 Medium -
mozjs128openSUSE An attacker was able to perform an out-of-bounds read or write on a JavaScript object by... No score -
mozjs128openSUSE An attacker was able to perform an out-of-bounds read or write on a JavaScript `Promise` object.... No score -
mozjs128openSUSE Use-after-free triggered by XSLTProcessor 6.5 Medium -
mozjs128openSUSE Incorrect handle could lead to sandbox escapes 10.0 Critical -
mozjs128openSUSE Clickjacking the registerProtocolHandler info-bar 4.3 Medium -
mozjs128openSUSE Use-after-free in WebTransportChild 7.5 High -
mozjs128openSUSE Certificate length was not properly checked 8.8 High -
mozjs128openSUSE A bug in WebAssembly code generation could result in a crash 8.8 High -
mozjs128openSUSE Use-after-free in XSLT 9.8 Critical -
mozjs128openSUSE Memory safety bugs fixed in Firefox 134, Thunderbird 134, Firefox ESR 128.6, and Thunderbird 128.6 5.1 Medium -
mozjs128openSUSE Alt-Svc ALPN validation failure when redirected 4.0 Medium -
mozjs128openSUSE WebChannel APIs susceptible to confused deputy attack 5.4 Medium -
mozjs128openSUSE oc_huff_tree_unpack in huffdec.c in libtheora in Theora through 1.0 7180717 has an invalid... 9.8 Critical -
mozjs128openSUSE In resizeToAtLeast of SkRegion.cpp, there is a possible out of bounds write due to an integer... 7.8 High -
mozjs128openSUSE When handling keypress events, an attacker may have been able to trick a user into bypassing the ... 8.8 High -
mozjs128openSUSE The application failed to account for exceptions thrown by the `loadManifestFromFile` method... 5.4 Medium -
mozjs128openSUSE A crafted URL containing Arabic script and whitespace characters could have hidden the true... 5.4 Medium -
mozjs128openSUSE Enhanced Tracking Protection's Strict mode may have inadvertently allowed a CSP `frame-src`... 6.1 Medium -
mozjs128openSUSE An attacker could cause a select dropdown to be shown over another tab; this could have led to... 4.3 Medium -
mozjs128openSUSE An attacker could have caused memory corruption due to a flaw in Apple's GPU driver; this can be... 8.8 High -
mozjs128openSUSE Out of Bounds Memory Read/Write in libjxl 6.9 Medium -
mozjs128openSUSE Resource exhaustion via Stack overflow in libjxl 6.9 Medium - Show olderLoading…