ALT-PU-2026-10331-4

Package update firefox in branch sisyphus

Version152.0.4-alt1

Published2026-08-11

Max severityCRITICAL

Severity:

Closed issues (2)

CRITICAL9.8

Уязвимость веб-браузера Firefox, связанная с записью за границами буфера, позволяющая нарушителю вызвать отказ в обслуживании

Published: 2026-08-09Modified: 2026-09-16

CVSS 3.xCRITICAL 9.8

CVSS:3.x/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CVSS 2.0CRITICAL 10.0

CVSS:2.0/AV:N/AC:L/Au:N/C:C/I:C/A:C

References

CRITICAL9.8

Memory safety bugs present in Firefox 152.0.3. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 152.0.4.

Published: 2026-06-30Modified: 2026-07-06

CVSS 3.xCRITICAL 9.8

CVSS:3.x/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References