CVE-2018-12371

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

An integer overflow vulnerability in the Skia library when allocating memory for edge builders on some systems with at least 16 GB of RAM. This results in the use of uninitialized memory, resulting in a potentially exploitable crash. This vulnerability affects Firefox ESR < 60.1, Thunderbird < 60, and Firefox < 61.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-190

Affected software

No affected versions have been published.

Timeline

Published: Jul 9, 2020
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2018

CVE-2018-123726.5Decrypted S/MIME parts, when included in HTML crafted for an attack, can leak plaintext when included in a a HTML reply/forward. This vulner CVE-2018-123736.5dDecrypted S/MIME parts hidden with CSS or the plaintext HTML tag can leak plaintext when included in a HTML reply/forward. This vulnerabili CVE-2018-123744.3Plaintext of decrypted emails can leak through by user submitting an embedded form by pressing enter key within a text input field. This vul CVE-2018-123758.8Memory safety bugs present in Firefox 61. Some of these bugs showed evidence of memory corruption and we presume that with enough effort tha CVE-2018-123769.8Memory safety bugs present in Firefox 61 and Firefox ESR 60.1. Some of these bugs showed evidence of memory corruption and we presume that w CVE-2018-123779.8A use-after-free vulnerability can occur when refresh driver timers are refreshed in some circumstances during shutdown when the timer is de CVE-2018-123789.8A use-after-free vulnerability can occur when an IndexedDB index is deleted while still in use by JavaScript code that is providing payload CVE-2018-123797.8When the Mozilla Updater opens a MAR format file which contains a very long item filename, an out-of-bounds write can be triggered, leading CVE-2018-12387.5Dell EMC ScaleIO versions prior to 2.5, contain a command injection vulnerability in the Light Installation Agent (LIA). This component is u CVE-2018-123815.3Manually dragging and dropping an Outlook email message into the browser will trigger a page navigation when the message's mail columns are CVE-2018-123825.3The displayed addressbar URL can be spoofed on Firefox for Android using a javascript: URI in concert with JavaScript to insert text before CVE-2018-123835.5If a user saved passwords before Firefox 58 and then later set a master password, an unencrypted copy of these passwords is still accessible