CVE-2018-12378: Use After Free
A use-after-free vulnerability can occur when an index is deleted while still in use in IndexedDB by JavaScript code that is providing payload values to be stored. This results in a potentially exploitable crash.
External Reference:
https://www.mozilla.org/en-US/security/advisories/mfsa2018-21/#CVE-2018-12378
Other sources
A use-after-free vulnerability can occur when an IndexedDB index is deleted while still in use by JavaScript code that is providing payload values to be stored. This results in a potentially exploitable crash.
— Mozilla
Affected Software
Event History
Parent advisories
This vulnerability appears in the following advisories.
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
What is the severity of CVE-2018-12378?
CVE-2018-12378 is considered a high-severity vulnerability due to its potential to cause crashes and exploitation.
How do I fix CVE-2018-12378?
To fix CVE-2018-12378, update your affected software to the latest version that addresses this vulnerability.
Which software products are affected by CVE-2018-12378?
CVE-2018-12378 affects Mozilla Firefox ESR versions up to 60.2, Firefox versions up to 62, and Thunderbird versions up to 60.2.1.
What type of vulnerability is CVE-2018-12378?
CVE-2018-12378 is classified as a use-after-free vulnerability occurring in the IndexedDB implementation in JavaScript.
Can CVE-2018-12378 be exploited remotely?
Yes, CVE-2018-12378 could potentially be exploited remotely through malicious web content.