| 1438671
|
|
Stringbuffer canary crash in safebrowsing code
|
Toolkit
|
Safe Browsing
|
francois
|
RESO
|
FIXE
|
2018-06-28
|
| 1419373
|
|
XPConnect can access freed JSObjects during shutdown
|
Core
|
XPConnect
|
jcoppeard
|
RESO
|
FIXE
|
2019-08-07
|
| 1444673
|
|
Probable write beyond bounds in CodeSegment::create()
|
Core
|
JavaScript Engine: J
|
mail
|
RESO
|
FIXE
|
2024-05-30
|
| 1413033
|
|
Crash in js::ZoneGroup::enter called from AutoJSAPI::InitInternal()
|
Core
|
JavaScript Engine
|
jdemooij
|
RESO
|
FIXE
|
2019-08-07
|
| 1463329
|
|
AddressSanitizer: heap-use-after-free /builds/worker/workspace/build/src/obj-firefox/dist/include/mozilla/RefPtr.h:92:25 in RefPtr
|
Core
|
WebVR
|
kearwood
|
RESO
|
FIXE
|
2020-02-28
|
| 1454448
|
|
Free of static memory in ExecuteServiceCommand()
|
Toolkit
|
Application Update
|
molly
|
RESO
|
FIXE
|
2024-05-30
|
| 1453505
|
|
Latent heap corruption on allocator mismatch in pk11_copyAttributes()
|
NSS
|
Libraries
|
ttaubert
|
RESO
|
FIXE
|
2024-05-30
|
| 1412882
|
|
Crash in gfxFontUtils::MapCharToGlyphFormat4
|
Core
|
Graphics: Text
|
jfkthame
|
VERI
|
FIXE
|
2021-06-24
|
| 1464872
|
|
Assertion failure: !zone->isGCMarkingBlack() || zone->isAtomsZone(), at js/src/gc/Marking.cpp:253 with Debugger
|
Core
|
JavaScript Engine
|
nobody
|
VERI
|
FIXE
|
2023-12-06
|