CVE-2018-12371

An integer overflow vulnerability in the Skia library when allocating memory for edge builders on some systems with at least 16 GB of RAM

published July 9, 2020

CVSS
—
EPSS
1%
Percentile
73.1
In the wild
Unconfirmed
What it is

An integer overflow vulnerability in the Skia library when allocating memory for edge builders on some systems with at least 16 GB of RAM. This results in the use of uninitialized memory, resulting in a potentially exploitable crash. This vulnerability affects Firefox ESR < 60.1, Thunderbird < 60, and Firefox < 61.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01446 · 73.1th percentile
Published
2020-07-09T13:54Z
EPSS history
Timeline
  • 09 JUL 13:54Z
    An integer overflow vulnerability in the Skia library when allocating memory for edge builders on some systems with at least 16 GB of RAM
    cvelistv5