Skip to content
Not rated

CVE-2019-11746 A use-after-free vulnerability can occur while manipulating video elements if the body is freed while still in use

Description

A use-after-free vulnerability can occur while manipulating video elements if the body is freed while still in use. This results in a potentially exploitable crash. This vulnerability affects Firefox < 69, Thunderbird < 68.1, Thunderbird < 60.9, Firefox ESR < 60.9, and Firefox ESR < 68.1.

Affected products and versions

Product Affected versions Fixed in
Firefox 69 earliest → < 69 69
Thunderbird 68.1 earliest → < 68.1 68.1
Thunderbird 60.9 earliest → < 60.9 60.9
Firefox ESR 68.1 earliest → < 68.1 68.1
Firefox ESR 60.9 earliest → < 60.9 60.9
The 2221 CVEs of Firefox →
Track this CVE