35
CVE-2019-9810
- CVSS 3.1
- 8.8 high
- EPSS
- 27%p98
- Published
- ·
- Modified
Description · NVD
Incorrect alias information in IonMonkey JIT compiler for Array.prototype.slice method may lead to missing bounds check and a buffer overflow. This vulnerability affects Firefox < 66.0.1, Firefox ESR < 60.6.1, and Thunderbird < 60.6.1.
- Products
- firefox, thunderbird, enterprise linux, enterprise linux eus, enterprise linux server aus, enterprise linux server tus
- Weakness
- CWE-119
- Vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H