mozilla firefox CVE-2018-18493 vulnerability in Mozilla and Other Products
Published on February 28, 2019

product logo product logo product logo product logo product logo product logo
A buffer overflow can occur in the Skia library during buffer offset calculations with hardware accelerated canvas 2D actions due to the use of 32-bit calculations instead of 64-bit. This results in a potentially exploitable crash. This vulnerability affects Thunderbird < 60.4, Firefox ESR < 60.4, and Firefox < 64.

Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory NVD


Products Associated with CVE-2018-18493

You can be notified by email with stack.watch whenever vulnerabilities like CVE-2018-18493 are published in these products:

 
 
 
 
 
 
 
 
 
 
 

Affected Versions

Mozilla Thunderbird: Mozilla Firefox ESR: Mozilla Firefox:

Exploit Probability

EPSS
24.30%
Percentile
95.98%

EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.