CVE-2019-9810

PoC ×2—

CVSS 3.1

8.8 high

EPSS

30%p98

Published

Apr 26, 2019 (Apr 26, 2019)

Modified

Jun 17, 2026

Description

Incorrect alias information in IonMonkey JIT compiler for Array.prototype.slice method may lead to missing bounds check and a buffer overflow. This vulnerability affects Firefox < 66.0.1, Firefox ESR < 60.6.1, and Thunderbird < 60.6.1.

Vendors: mozilla redhat
Products: firefox, thunderbird, enterprise linux, enterprise linux eus, enterprise linux server aus, enterprise linux server tus
Weakness: CWE-119
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (29.5%)

In the news1 stories

Experts Warn of Browser Extensions Spying On Users via Cloud9 Chrome Botnet Network

The Hacker NewsNov 11, 11:51 UTC · Nov 11, 2022Malware CVE-2019-11708 CVE-2019-9810 CVE-2014-6332+2 CVEs