| 1317501
|
|
MediaStreamGraph processes runnables at unsafe time
|
Core
|
Audio/Video: MediaSt
|
apehrson
|
RESO
|
FIXE
|
2019-03-31
|
| 1324810
|
|
Ion bug with RegExp{Prototype,Instance}OptimizableRaw and the exception handler
|
Core
|
JavaScript Engine: J
|
arai.unmht
|
RESO
|
FIXE
|
2017-08-28
|
| 1319456
|
|
[e10s] Crash in std::_Hash<T>::equal_range
|
Core
|
Printing: Output
|
bobowencode
|
RESO
|
FIXE
|
2017-08-28
|
| 1322305
|
|
Use-after-free in GMP process if GMPDecryptorChild actor destroyed before GMPVideoDecoderChild actor
|
Core
|
Audio/Video: GMP
|
chris
|
RESO
|
FIXE
|
2017-08-28
|
| 1302231
|
|
Crash in mozilla::MediaStreamGraph::NotifyOutputData since Firefox 49
|
Core
|
Audio/Video: MediaSt
|
padenot
|
RESO
|
FIXE
|
2017-08-28
|
| 1297808
|
|
Latent (?) overflow in RTCPPacketInformation::AddApplicationData() could cause buffer overrun
|
Core
|
WebRTC: Networking
|
rjesup
|
RESO
|
FIXE
|
2024-05-30
|
| 1288561
|
|
Overflow in nsAttrAndChildArray::GrowBy() causes buffer overrun
|
Core
|
DOM: Core & HTML
|
amarchesini
|
RESO
|
FIXE
|
2024-05-30
|
| 1313385
|
|
WebSocketImpl::WebSocketImpl does not initialise mSecure
|
Core
|
DOM: Core & HTML
|
amarchesini
|
RESO
|
FIXE
|
2019-03-13
|
| 1311319
|
|
Do not call PR_GetErrorText() when PR_GetErrorTextLength() is 0
|
Core
|
JavaScript Engine
|
arai.unmht
|
RESO
|
FIXE
|
2017-08-28
|
| 1295747
|
|
Latent overflow in AppendUTF16toUTF8() could cause buffer overrun
|
Core
|
XPCOM
|
ericrahm+bz
|
RESO
|
FIXE
|
2024-05-30
|
| 1318766
|
|
Write beyond bounds caused by nsTSubstringTuple_CharT::Length()
|
Core
|
XPCOM
|
ericrahm+bz
|
RESO
|
FIXE
|
2024-05-30
|
| 1293327
|
|
Make indexDB CreateStorageConnection get file protocol handler directly
|
Core
|
Storage: IndexedDB
|
honzab.moz
|
RESO
|
FIXE
|
2017-08-28
|
| 1321374
|
|
UAF with dynamically-allocated JSClasses
|
Core
|
JavaScript Engine
|
n.nethercote
|
RESO
|
FIXE
|
2017-08-28
|
| 1319888
|
|
Assertion failure: containsPC(pc); from Ion resume points.
|
Core
|
JavaScript Engine: J
|
nicolas.b.pierron
|
RESO
|
FIXE
|
2018-10-26
|
| 1300145
|
|
Crash in InvalidArrayIndex_CRASH | mozilla::ContentCache::TextRectArray::GetUnionRectAsFarAsPossible
|
Core
|
Widget
|
nobody
|
RESO
|
FIXE
|
2017-08-28
|
| 1307458
|
|
crash in mozilla::layers::Layer::SetVisibleRegion
|
Core
|
Graphics: Layers
|
sotaro.ikeda.g
|
RESO
|
FIXE
|
2017-08-28
|
| 1325344
|
|
Hit MOZ_CRASH(ToInt32 invalid input type) at js/src/jit/Lowering.cpp:2159
|
Core
|
JavaScript Engine
|
hv1989
|
VERI
|
FIXE
|
2023-12-06
|
| 1329989
|
|
Crash [@ mozilla::dom::workers::ServiceWorkerManager::NotifyServiceWorkerRegistrationRemoved ]
|
Core
|
DOM: Service Workers
|
ben
|
VERI
|
FIXE
|
2017-08-28
|
| 1315447
|
|
Crash in mozilla::layers::ClientLayerManager::GetRemoteRenderer
|
Core
|
Graphics: Layers
|
dvander
|
VERI
|
FIXE
|
2017-08-28
|