CVEvulnerability

CVE-2016-2828

8.8 HIGH Published 2016-06-13 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2016-06-13
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.0 ([email protected])
8.8 HIGH — CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
6.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:P

Description

Use-after-free vulnerability in Mozilla Firefox before 47.0 and Firefox ESR 45.x before 45.2 allows remote attackers to execute arbitrary code via WebGL content that triggers texture access after destruction of the texture's recycle pool.

Affected configurations

• canonical ubuntu linux 12.04 • canonical ubuntu linux 14.04 • canonical ubuntu linux 15.10 • canonical ubuntu linux 16.04 • opensuse leap 42.1 • opensuse opensuse 13.1 • opensuse opensuse 13.2 • mozilla firefox (<= 46.0.1) • mozilla firefox 45.1.0 • mozilla firefox 45.1.1 • debian debian linux 8.0

References