CVE-2017-5374

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

Memory safety bugs were reported in Firefox 50.1. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Firefox < 51.

Metrics

CVSS 3.0 9.8/10CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-119

Affected software

No affected versions have been published.

Timeline

Published
Jun 11, 2018
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2017

CVE-2017-53759.8JIT code allocation can allow for a bypass of ASLR and DEP protections leading to potential memory corruption attacks. This vulnerability afCVE-2017-53769.8Use-after-free while manipulating XSL in XSLT documents. This vulnerability affects Thunderbird < 45.7, Firefox ESR < 45.7, and Firefox < 51CVE-2017-53779.8A memory corruption vulnerability in Skia that can occur when using transforms to make gradients, resulting in a potentially exploitable craCVE-2017-53787.5Hashed codes of JavaScript objects are shared between pages. This allows for pointer leaks because an object's address can be discovered thrCVE-2017-53797.5Use-after-free vulnerability in Web Animations when interacting with cycle collection found through fuzzing. This vulnerability affects FireCVE-2017-53809.8A potential use-after-free found through fuzzing during DOM manipulation of SVG content. This vulnerability affects Thunderbird < 45.7, FireCVE-2017-53817.5The "export" function in the Certificate Viewer can force local filesystem navigation when the "common name" in a certificate contains slashCVE-2017-53827.5Feed preview for RSS feeds can be used to capture errors and exceptions generated by privileged content, allowing for the exposure of internCVE-2017-53835.3URLs containing certain unicode glyphs for alternative hyphens and quotes do not properly trigger punycode display, allowing for domain nameCVE-2017-53845.9Proxy Auto-Config (PAC) files can specify a JavaScript function called for all URL requests with the full URL path which exposes more informCVE-2017-53857.5Data sent with in multipart channels, such as the multipart/x-mixed-replace MIME type, will ignore the referrer-policy response header, leadCVE-2017-53867.3WebExtension scripts can use the "data:" protocol to affect pages loaded by other web extensions using this protocol, leading to potential d