CVE-2017-5411: Use After Free
A use-after-free can occur during buffer storage operations within the ANGLE graphics library, used for WebGL content. The buffer storage can be freed while still in use in some circumstances, leading to a potentially exploitable crash. Note: This issue is in libGLES, which is only in use on Windows. Other operating systems are not affected.
Other sources
A use-after-free can occur during buffer storage operations within the ANGLE graphics library, used for WebGL content. The buffer storage can be freed while still in use in some circumstances, leading to a potentially exploitable crash. Note: This issue is in "libGLES", which is only in use on Windows. Other operating systems are not affected. This vulnerability affects Firefox < 52 and Thunderbird < 52.
Affected Software
Event History
Peer vulnerabilities
Found alongside the following vulnerabilities.
- CVE-2017-5400
- CVE-2017-5401
- CVE-2017-5402
- CVE-2017-5403
- CVE-2017-5404
- CVE-2017-5406
- CVE-2017-5407
- CVE-2017-5410
- CVE-2017-5411
- CVE-2017-5409
- CVE-2017-5408
- CVE-2017-5412
- CVE-2017-5413
- CVE-2017-5414
- CVE-2017-5415
- CVE-2017-5416
- CVE-2017-5417
- CVE-2017-5425
- CVE-2017-5426
- CVE-2017-5427
- CVE-2017-5418
- CVE-2017-5419
- CVE-2017-5420
- CVE-2017-5405
- CVE-2017-5421
- CVE-2017-5422
- CVE-2017-5399
- CVE-2017-5398
Frequently Asked Questions
What is the severity of CVE-2017-5411?
CVE-2017-5411 has been classified as a high severity vulnerability due to its potential to lead to exploitable crashes.
How do I fix CVE-2017-5411?
To fix CVE-2017-5411, users should upgrade to Firefox or Thunderbird version 52 or later.
Which software is affected by CVE-2017-5411?
CVE-2017-5411 affects Mozilla Firefox and Mozilla Thunderbird versions prior to 52.
What type of vulnerability is CVE-2017-5411?
CVE-2017-5411 is a use-after-free vulnerability that occurs during buffer storage operations within the ANGLE graphics library.
On which operating system does CVE-2017-5411 occur?
CVE-2017-5411 primarily affects software running on the Windows operating system.