CVE-2015-7179

The VertexBufferInterface::reserveVertexSpace function in libGLES in ANGLE, as used in Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 on Windows…

published September 24, 2015

CVSS
—
EPSS
4%
Percentile
90.9
In the wild
Unconfirmed
What it is

The VertexBufferInterface::reserveVertexSpace function in libGLES in ANGLE, as used in Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 on Windows, incorrectly allocates memory for shader attribute arrays, which allows remote attackers to execute arbitrary code or cause a denial of service (buffer overflow and application crash) via crafted (1) OpenGL or (2) WebGL content.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.04184 · 90.9th percentile
Published
2015-09-24T01:00Z
EPSS history
Timeline
  • 24 SEP 01:00Z
    The VertexBufferInterface::reserveVertexSpace function in libGLES in ANGLE, as used in Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 on Windows…
    cvelistv5