CVE-2018-5151

firefox: Memory safety bugs were reported in Firefox 59

CVE-2018-5151 is fixed in 4 products on 1 platform, first by firefox 60.0+build2-0ubuntu1, released May 10, 2018. It is not reported as exploited. Patch Radar priority: Routine.

Routine
CVSS
n/a
Medium
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0275
86th percentile

Memory safety bugs were reported in Firefox 59. Some of these bugs showedevidence of memory corruption and we presume that with enough effort thatsome of these could be exploited to run arbitrary code. This vulnerabilityaffects Firefox < 60.

Where it's fixed

ProductFixed inFixReleased
Linux
firefox · Ubuntu 18.04.6 LTS (bionic) 60.0+build2-0ubuntu1 firefox 60.0+build2-0ubuntu1 May 10, 2018
firefox · Ubuntu 24.10 (oracular) 60.0+build2-0ubuntu1 firefox 60.0+build2-0ubuntu1 May 11, 2018
firefox · Ubuntu 25.04 (plucky) 60.0+build2-0ubuntu1 firefox 60.0+build2-0ubuntu1 May 11, 2018
firefox-globalmenu · Ubuntu 18.04.6 LTS (bionic) 60.0+build2-0ubuntu1 firefox-globalmenu 60.0+build2-0ubuntu1 May 10, 2018
firefox-mozsymbols · Ubuntu 18.04.6 LTS (bionic) 60.0+build2-0ubuntu1 firefox-mozsymbols 60.0+build2-0ubuntu1 May 10, 2018
firefox-testsuite · Ubuntu 18.04.6 LTS (bionic) 60.0+build2-0ubuntu1 firefox-testsuite 60.0+build2-0ubuntu1 May 10, 2018