CVE-2018-12377: Use After Free
A use-after-free vulnerability can occur when driver timers are refreshed in some circumstances during shutdown when the timer is deleted while still in use. This results in a potentially exploitable crash.
External Reference:
https://www.mozilla.org/en-US/security/advisories/mfsa2018-21/#CVE-2018-12377
Other sources
A use-after-free vulnerability can occur when refresh driver timers are refreshed in some circumstances during shutdown when the timer is deleted while still in use. This results in a potentially exploitable crash.
— Mozilla
Affected Software
Event History
Parent advisories
This vulnerability appears in the following advisories.
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
What is the severity of CVE-2018-12377?
CVE-2018-12377 has been classified with a high severity due to its potential to cause crashes and allow exploit attempts.
How do I fix CVE-2018-12377?
To fix CVE-2018-12377, update affected Mozilla products like Firefox ESR or Thunderbird to the latest versions available.
Which software is affected by CVE-2018-12377?
CVE-2018-12377 affects Mozilla Firefox ESR, Thunderbird, and various versions of Red Hat Enterprise Linux and Debian.
What type of vulnerability is CVE-2018-12377?
CVE-2018-12377 is a use-after-free vulnerability related to driver timers during shutdown.
Can CVE-2018-12377 lead to remote code execution?
While CVE-2018-12377 primarily results in crashes, it is considered potentially exploitable, which raises concerns about remote code execution.