CVE-2018-5129

A lack of parameter validation on IPC messages results in a potential out-of-bounds write through malformed IPC messages

published June 11, 2018

CVSS
—
EPSS
3%
Percentile
87.4
In the wild
Unconfirmed
What it is

A lack of parameter validation on IPC messages results in a potential out-of-bounds write through malformed IPC messages. This can potentially allow for sandbox escape through memory corruption in the parent process. This vulnerability affects Thunderbird < 52.7, Firefox ESR < 52.7, and Firefox < 59.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03037 · 87.4th percentile
Published
2018-06-11T21:00Z
EPSS history
Timeline
  • 11 JUN 21:00Z
    A lack of parameter validation on IPC messages results in a potential out-of-bounds write through malformed IPC messages
    cvelistv5