description: On some systems—depending on the graphics settings and drivers—it was possible to force an out-of-bounds read and leak memory data into the images created on the canvas element. This vulnerability affects Firefox < 120, Firefox ESR < 115.5.0, and Thunderbird < 115.5.
problem types: Out-of-bound memory access in WebGL2 blitFramebuffer
affected:
{
product: Firefox
vendor: Mozilla
versions:
lessThan: 120, status: affected, version: unspecified, versionType: custom
}
{
product: Firefox ESR
vendor: Mozilla
versions:
lessThan: 115.5.0, status: affected, version: unspecified, versionType: custom
}
{
product: Thunderbird
vendor: Mozilla
versions:
lessThan: 115.5, status: affected, version: unspecified, versionType: custom
}
