| 1301547
|
|
remove use of DER_Lengths from PSM
|
Core
|
Security: PSM
|
dkeeler
|
RESO
|
FIXE
|
2019-08-07
|
| 1486314
|
|
heap-buffer-overflow in [@ mozilla::TextEditRules::CreateBogusNodeIfNeeded]
|
Core
|
DOM: Editor
|
m_kato
|
RESO
|
FIXE
|
2019-08-07
|
| 1487167
|
|
Rooting hazards, Aug 2018 edition
|
Core
|
DOM: Core & HTML
|
sphink
|
RESO
|
FIXE
|
2019-08-07
|
| 1379411
|
|
Latent write beyond bounds in MakeCompressedIndexDataValues()
|
Core
|
Storage: IndexedDB
|
shes050117
|
RESO
|
FIXE
|
2024-05-30
|
| 1482122
|
|
Crash in nsTArray_Impl<T>::Clear | wcsrtombs | mozilla::jni::detail::ProxyNativeCall<T>::operator()
|
Firefox for Android
|
General
|
gsvelto
|
RESO
|
FIXE
|
2020-12-21
|
| 1471427
|
|
Latent (?) write beyond bounds in WasmCompiledModuleStream::onCompilationComplete()
|
Core
|
JavaScript: WebAssem
|
mail
|
RESO
|
FIXE
|
2024-05-30
|
| 1472639
|
|
Assertion failure: numBytes <= maxSize.valueOr((4294967295U)), at js/src/vm/ArrayBufferObject.cpp:766 with wasm
|
Core
|
JavaScript: WebAssem
|
nobody
|
VERI
|
FIXE
|
2023-12-06
|
| 1485698
|
|
Crash [@ JS::Value::setObject] or Assertion failure: metaObject, at jit/IonBuilder.cpp:13181 with ES6 Modules
|
Core
|
JavaScript Engine
|
nobody
|
VERI
|
FIXE
|
2023-12-06
|