vulnerability

MFSA2018-02 Firefox: Security vulnerabilities fixed in Firefox 58 (CVE-2018-5095)

Try Surface Command

Back to search

Severity

CVSS

(AV:N/AC:L/Au:N/C:P/I:P/A:P)

Published

Jan 23, 2018

Added

Jan 24, 2018

Modified

Mar 27, 2026

Description

An integer overflow vulnerability in the Skia library when allocating memory for edge builders on some systems with at least 8 GB of RAM. This results in the use of uninitialized memory, resulting in a potentially exploitable crash. This vulnerability affects Thunderbird < 52.6, Firefox ESR < 52.6, and Firefox < 58.

Solution

mozilla-firefox-upgrade-58_0

References

CVE-2018-5095
https://attackerkb.com/topics/CVE-2018-5095
CWE-190
CWE-908
EUVD-EUVD-2018-16881
http://www.mozilla.org/security/announce/2018/mfsa2018-02.html
https://euvd.enisa.europa.eu/vulnerability/EUVD-2018-16881

Rapid7 Labs

2026 Global Threat Landscape Report

The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.

Get report