CVE-2018-5180

Source
Severity Low
Remote Yes
Type Arbitrary code execution
Description
A use-after-free vulnerability can occur during WebGL operations in Firefox before 60.0. While this results in a potentially exploitable crash, the vulnerability is limited because the memory is freed and reused in a brief window of time during the freeing of the same callstack.
Group Package Affected Fixed Severity Status Ticket
AVG-693 firefox 59.0.2-3 60.0-1 Critical Fixed
Date Advisory Group Package Severity Description
13 May 2018 ASA-201805-10 AVG-693 firefox Critical multiple issues
References
https://www.mozilla.org/en-US/security/advisories/mfsa2018-11/#CVE-2018-5180
https://bugzilla.mozilla.org/show_bug.cgi?id=1444086