peter bassill · operator
$ cve CVE-2018-5159 JSON

CVE-2018-5159 EXPLOIT

9.8
CRITICAL · CVSS 3.0 · EPSS 21% (pctl 98)

Patch early

A public exploit exists.

Description

An integer overflow can occur in the Skia library due to 32-bit integer use in an array without integer overflow checks, resulting in possible out-of-bounds writes. This could lead to a potentially exploitable crash triggerable by web content. This vulnerability affects Thunderbird < 52.8, Thunderbird ESR < 52.8, Firefox < 60, and Firefox ESR < 52.8.

Scoring

CVSS9.8 (CRITICAL, v3.0)
VectorCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS21.04% — more likely to be exploited than 98% of all CVEs
WeaknessCWE-190
On CISA KEVno
Public exploityes
Published2018-06-11
Last modified2026-06-17

Affected (11)

VendorProduct
canonicalubuntu linux
debiandebian linux
mozillafirefox
mozillathunderbird
mozillathunderbird esr
redhatenterprise linux desktop
redhatenterprise linux server
redhatenterprise linux server aus
redhatenterprise linux server eus
redhatenterprise linux server tus
redhatenterprise linux workstation

Public exploits

SourceTitleDate
exploit-dbSkia and Firefox - Integer Overflow in SkTDArray Leading to Out-of-Bounds Write2018-05-25

References

→ the Explorer  ·  watch your stack  ·  NVD