CVE-2018-12388: Buffer Overflow
Last updated 24 July 2024
Other sources
Mozilla developers and community members Christian Holler, Dana Keeler, Ronald Crane, Marcia Knous, Tyson Smith, Daniel Veditz, and Steve Fink reported memory safety bugs present in Firefox 62. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code.
Mozilla developers and community members reported memory safety bugs present in Firefox 62. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Firefox < 63.
— Launchpad
Affected Software
Event History
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
What is the severity of CVE-2018-12388?
The severity of CVE-2018-12388 is critical.
Which software is affected by CVE-2018-12388?
The software affected by CVE-2018-12388 is Mozilla Firefox 62 up to and excluding version 63, as well as Canonical Ubuntu Linux versions 14.04, 16.04, 18.04, and 18.10.
What is the remedy for CVE-2018-12388?
The remedy for CVE-2018-12388 is to update Mozilla Firefox to version 63.0 or higher.
Where can I find more information about CVE-2018-12388?
You can find more information about CVE-2018-12388 at the following references: [Bugzilla](https://bugzilla.mozilla.org/buglist.cgi?bug_id=1472639%2C1485698%2C1301547%2C1471427%2C1379411%2C1482122%2C1486314%2C1487167), [Mozilla Security Advisories](https://www.mozilla.org/en-US/security/advisories/mfsa2018-26/), [CVE Details](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-12388).
What is the Common Weakness Enumeration (CWE) for CVE-2018-12388?
The Common Weakness Enumeration (CWE) for CVE-2018-12388 is CWE-119.