{
  "cveId": "CVE-2018-12371",
  "url": "https://patchblox.com/security/cve/CVE-2018-12371",
  "summary": "CVE-2018-12371 is fixed in 4 products on 1 platform, first by firefox 61.0\u002Bbuild3-0ubuntu0.18.04.1, released June 26, 2018. It is not reported as exploited. Patch Radar priority: Routine.",
  "title": "firefox: An integer overflow vulnerability in the Skia library when allocating memory for edge builders on some systems with a...",
  "description": "An integer overflow vulnerability in the Skia library when allocating memory for edge builders on some systems with at least 16 GB of RAM. This results in the use of uninitialized memory, resulting in a potentially exploitable crash. This vulnerability affects Firefox ESR \u0026lt; 60.1, Thunderbird \u0026lt; 60, and Firefox \u0026lt; 61.",
  "published": "2018-06-26T17:00:00Z",
  "severity": "Medium",
  "epss": 0.01446,
  "epssPercentile": 0.73449,
  "priority": "Routine",
  "priorityTier": 4,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "firefox",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "61.0\u002Bbuild3-0ubuntu0.18.04.1",
      "fix": "firefox 61.0\u002Bbuild3-0ubuntu0.18.04.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-firefox-61.0-build3-0ubuntu0.18.04.1",
      "released": "2018-06-26T17:00:00Z"
    },
    {
      "platform": "linux",
      "product": "firefox-globalmenu",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "61.0\u002Bbuild3-0ubuntu0.18.04.1",
      "fix": "firefox-globalmenu 61.0\u002Bbuild3-0ubuntu0.18.04.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-firefox-globalmenu-61.0-build3-0ubuntu0.18.04.1",
      "released": "2018-06-26T17:00:00Z"
    },
    {
      "platform": "linux",
      "product": "firefox-mozsymbols",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "61.0\u002Bbuild3-0ubuntu0.18.04.1",
      "fix": "firefox-mozsymbols 61.0\u002Bbuild3-0ubuntu0.18.04.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-firefox-mozsymbols-61.0-build3-0ubuntu0.18.04.1",
      "released": "2018-06-26T17:00:00Z"
    },
    {
      "platform": "linux",
      "product": "firefox-testsuite",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "61.0\u002Bbuild3-0ubuntu0.18.04.1",
      "fix": "firefox-testsuite 61.0\u002Bbuild3-0ubuntu0.18.04.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-firefox-testsuite-61.0-build3-0ubuntu0.18.04.1",
      "released": "2018-06-26T17:00:00Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-07T18:46:35Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}