description: Due to confusion about ValueTags on JavaScript Objects, an object may pass through the type barrier, resulting in memory corruption and a potentially exploitable crash. *Note: this issue only affects Firefox on ARM64 platforms.* This vulnerability affects Firefox ESR < 68.10, Firefox < 78, and Thunderbird < 68.10.0.
problem types: Memory corruption due to missing sign-extension for ValueTags on ARM64
affected:
{
product: Firefox ESR
vendor: Mozilla
versions:
lessThan: 68.10, status: affected, version: unspecified, versionType: custom
}
{
product: Firefox
vendor: Mozilla
versions:
lessThan: 78, status: affected, version: unspecified, versionType: custom
}
{
product: Thunderbird
vendor: Mozilla
versions:
lessThan: 68.10.0, status: affected, version: unspecified, versionType: custom
}
