CVE-2018-5092: Use After Free
A use-after-free vulnerability can occur when the thread for a Web Worker is freed from memory prematurely instead of from memory in the main thread while cancelling fetch operations.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/firefoxto a version that resolves this vulnerability.Fixed in 131.0.2-2 - Upgrade
Upgrade
Firefoxto a version that resolves this vulnerability.Fixed in 58
Event History
Peer vulnerabilities
Found alongside the following vulnerabilities.
- CVE-2018-5091
- CVE-2018-5092
- CVE-2018-5093
- CVE-2018-5094
- CVE-2018-5095
- CVE-2018-5097
- CVE-2018-5098
- CVE-2018-5099
- CVE-2018-5100
- CVE-2018-5101
- CVE-2018-5102
- CVE-2018-5103
- CVE-2018-5104
- CVE-2018-5105
- CVE-2018-5106
- CVE-2018-5107
- CVE-2018-5108
- CVE-2018-5109
- CVE-2018-5110
- CVE-2018-5111
- CVE-2018-5112
- CVE-2018-5113
- CVE-2018-5114
- CVE-2018-5115
- CVE-2018-5116
- CVE-2018-5117
- CVE-2018-5118
- CVE-2018-5119
- CVE-2018-5121
- CVE-2018-5122
- CVE-2018-5090
- CVE-2018-5089
Frequently Asked Questions
What is CVE-2018-5092?
CVE-2018-5092 is a use-after-free vulnerability in Firefox < 58 that occurs when the thread for a Web Worker is freed from memory prematurely.
How does CVE-2018-5092 affect Firefox?
CVE-2018-5092 affects Firefox versions lower than 58.
What is the severity of CVE-2018-5092?
CVE-2018-5092 has a severity rating of 9.8, which is considered critical.
How can I fix CVE-2018-5092?
To fix CVE-2018-5092, users should update their Firefox browser to version 58 or higher.
Where can I find more information about CVE-2018-5092?
You can find more information about CVE-2018-5092 on the following references: [Bugzilla](https://bugzilla.mozilla.org/show_bug.cgi?id=1418074), [Mozilla Security Advisories](https://www.mozilla.org/en-US/security/advisories/mfsa2018-02/), [SecurityFocus](http://www.securityfocus.com/bid/102786).