CVE-2018-12376: Buffer Overflow
Last updated 25 August 2025
Other sources
Memory safety bugs present in Firefox 61 and Firefox ESR 60.1. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Firefox < 62, Firefox ESR < 60.2, and Thunderbird < 60.2.1.
— Launchpad
Mozilla developers and community members Alex Gaynor, Boris Zbarsky, Christoph Diehl, Christian Holler, Jason Kratzer, Jed Davis, Tyson Smith, Bogdan Tara, Karl Tomlinson, Mats Palmgren, Nika Layzell, Ted Campbell, and Andrei Cristian Petcu reported memory safety bugs present in Firefox 61 and Firefox ESR 60.1. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code.
— Mozilla
Mozilla developers and community members reported memory safety bugs present in Firefox 60 and Firefox ESR 60. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code.
External Reference:
https://www.mozilla.org/en-US/security/advisories/mfsa2018-21/#CVE-2018-12376
— Red Hat
Affected Software
Event History
Parent advisories
This vulnerability appears in the following advisories.
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
What is the severity of CVE-2018-12376?
CVE-2018-12376 is classified as a high severity vulnerability due to its potential for memory corruption and arbitrary code execution.
How do I fix CVE-2018-12376?
To fix CVE-2018-12376, upgrade to Firefox version 62 or later, or Firefox ESR version 60.2 or later.
Which versions of software are affected by CVE-2018-12376?
CVE-2018-12376 affects Firefox versions prior to 62 and Firefox ESR versions prior to 60.2.
What impact does CVE-2018-12376 have on my system?
CVE-2018-12376 may allow attackers to exploit memory safety bugs, potentially leading to arbitrary code execution on affected systems.
Are there any known exploits for CVE-2018-12376?
As of now, there are no publicly reported exploits for CVE-2018-12376, but its nature suggests a risk of exploitation.