description: When reading from areas partially or fully outside the source resource with WebGL's <code>copyTexSubImage</code> method, the specification requires the returned values be zero. Previously, this memory was uninitialized, leading to potentially sensitive data disclosure. This vulnerability affects Thunderbird < 68.7.0, Firefox ESR < 68.7, and Firefox < 75.
problem types: Uninitialized memory could be read when using the WebGL copyTexSubImage method
affected:
{
product: Thunderbird
vendor: Mozilla
versions:
lessThan: 68.7.0, status: affected, version: unspecified, versionType: custom
}
{
product: Firefox ESR
vendor: Mozilla
versions:
lessThan: 68.7, status: affected, version: unspecified, versionType: custom
}
{
product: Firefox
vendor: Mozilla
versions:
lessThan: 75, status: affected, version: unspecified, versionType: custom
}
