1348424,1352295,1353312,1355039,1360309,1357090,1363396,1365602,1366595

Fri Apr 19 2024 11:03:05 PDT
  • Bug ID: 1348424, 1352295, 1353312, 1355039, 1360309, 1357090, 1363396, 1365602, 1366595

ID Type Summary Product Comp Assignee Status Resolution Updated
1348424 Crash in objc_msgSend | TitlebarDrawCallback Core Widget: Cocoa mstange.moz RESO FIXE 2017-10-26
1352295 mozilla::dom::CanvasRenderingContext2D is trivially exploitable Core Graphics: Canvas2D MatsPalmgren_bugz RESO FIXE 2017-10-26
1353312 logical property on pseudo-element that disallows it (e.g., border-inline-* on ::first-line) causes access violation at 0x14141414 Core CSS Parsing and Comp cam VERI FIXE 2019-05-14
1355039 heap-use-after-free in mozilla::net::PredictorLearn Core DOM: Navigation smaug VERI FIXE 2017-10-26
1357090 Out-of-bounds array access in WebGLTexture::ImageInfoAtFace Core Graphics: CanvasWebG jgilbert VERI FIXE 2017-10-26
1360309 Security issue: Domain spoofing thanks to U+0F8C rendered as space on Mac Firefox Address Bar jfkthame VERI FIXE 2017-10-26
1363396 heap-use-after-free in nsDocViewerSelectionListener::NotifySelectionChanged Core Layout smaug VERI FIXE 2017-10-26
1365602 heap-use-after-free in nsQuoteList::RecalcAll Core Layout xidorn+moz VERI FIXE 2017-10-26
1366595 Stack-use-after-scope in NS_strlen while logging errors in XHR Core DOM: Core & HTML amarchesini RESO FIXE 2017-10-26
9 bugs found.