CVE-2019-9791
Published: Apr 26, 2019
Modified: Aug 4, 2024
Description
The type inference system allows the compilation of functions that can cause type confusions between arbitrary objects when compiled through the IonMonkey just-in-time (JIT) compiler and when the constructor function is entered through on-stack replacement (OSR). This allows for possible arbitrary reading and writing of objects during an exploitable crash. This vulnerability affects Thunderbird < 60.6, Firefox ESR < 60.6, and Firefox < 66.
| Vendor | Product | Versions |
|---|---|---|
Mozilla | Thunderbird | affected unspecified - < 60.6 |
Mozilla | Firefox ESR | affected unspecified - < 60.6 |
Mozilla | Firefox | affected unspecified - < 66 |
References
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now