description: An invalid grid size during QCMS (color profile) transformations can result in the out-of-bounds read interpreted as a float value. This could leak private data into the output. This vulnerability affects Thunderbird < 60, Thunderbird < 52.9, Firefox ESR < 60.1, Firefox ESR < 52.9, and Firefox < 61.
problem types: Invalid data handling during QCMS transformations
affected:
{
product: Thunderbird
vendor: Mozilla
versions:
lessThan: 60, status: affected, version: unspecified, versionType: custom
lessThan: 52.9, status: affected, version: unspecified, versionType: custom
}
{
product: Firefox ESR
vendor: Mozilla
versions:
lessThan: 60.1, status: affected, version: unspecified, versionType: custom
lessThan: 52.9, status: affected, version: unspecified, versionType: custom
}
{
product: Firefox
vendor: Mozilla
versions:
lessThan: 61, status: affected, version: unspecified, versionType: custom
}
