CVE-2017-5396

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

A use-after-free vulnerability in the Media Decoder when working with media files when some events are fired after the media elements are freed from memory. This vulnerability affects Thunderbird < 45.7, Firefox ESR < 45.7, and Firefox < 51.

Metrics

CVSS 3.0 9.8/10CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-416

Affected software

No affected versions have been published.

Timeline

Published: Jun 11, 2018
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2017

CVE-2017-53979.8The cache directory on the local file system is set to be world writable. Firefox defaults to extracting libraries from this cache. This all CVE-2017-53989.8Memory safety bugs were reported in Thunderbird 45.7. Some of these bugs showed evidence of memory corruption and we presume that with enoug CVE-2017-53999.8Memory safety bugs were reported in Firefox 51. Some of these bugs showed evidence of memory corruption and we presume that with enough effo CVE-2017-54009.8JIT-spray targeting asm.js combined with a heap spray allows for a bypass of ASLR and DEP protections leading to potential memory corruption CVE-2017-54019.8A crash triggerable by web content in which an "ErrorResult" references unassigned memory due to a logic error. The resulting crash may be e CVE-2017-54029.8A use-after-free can occur when events are fired for a "FontFace" object after the object has been already been destroyed while working with CVE-2017-54039.8When adding a range to an object in the DOM, it is possible to use "addRange" to add the range to an incorrect root object. This triggers a CVE-2017-54049.8A use-after-free error can occur when manipulating ranges in selections with one node inside a native anonymous tree and one node outside of CVE-2017-54055.3Certain response codes in FTP connections can result in the use of uninitialized values for ports in FTP operations. This vulnerability affe CVE-2017-54067.5A segmentation fault can occur in the Skia graphics library during some canvas operations due to issues with mask/clip intersection and empt CVE-2017-54076.5Using SVG filters that don't use the fixed point math implementation on a target iframe, a malicious page can extract pixel values from a ta CVE-2017-54085.3Video files loaded video captions cross-origin without checking for the presence of CORS headers permitting such cross-origin use, leading t