CVE-2018-5094

A heap buffer overflow vulnerability may occur in WebAssembly when "shrinkElements" is called followed by garbage collection on memory that is now…

published June 11, 2018

CVSS
—
EPSS
15%
Percentile
96.7
In the wild
Unconfirmed
What it is

A heap buffer overflow vulnerability may occur in WebAssembly when "shrinkElements" is called followed by garbage collection on memory that is now uninitialized. This results in a potentially exploitable crash. This vulnerability affects Firefox < 58.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.14961 · 96.7th percentile
Published
2018-06-11T21:00Z
EPSS history
Timeline
  • 11 JUN 21:00Z
    A heap buffer overflow vulnerability may occur in WebAssembly when "shrinkElements" is called followed by garbage collection on memory that is now…
    cvelistv5