description: The libtremor library has the same flaw as CVE-2018-5146. This library is used by Firefox in place of libvorbis on Android and ARM platforms. This vulnerability affects Firefox ESR < 52.7.2 and Firefox < 59.0.1.
problem types: Out of bounds memory write in libtremor
affected:
{
product: Firefox ESR
vendor: Mozilla
versions:
lessThan: 52.7.2, status: affected, version: unspecified, versionType: custom
}
{
product: Firefox
vendor: Mozilla
versions:
lessThan: 59.0.1, status: affected, version: unspecified, versionType: custom
}
