Medium firefox Cross Origin 🔧 Commit mapped

Overview

Medium
Severity
CVSS
No
Exploited ITW
Fixed
Fix Status
Impactmoderate
DescriptionSame-origin policy bypass in the Networking: DNS component
ComponentNetworking
Bug ClassCross Origin
Tracker2041001
Fix commitaf41e0702e11 (firefox) +3/-0
CISA KEVNot listed
CreditedRintaro Kawasugi
Disclosed2026-07-21

Changed Functions

FunctionChangeNotes
if
netwerk/dns/DNSPacket.cpp
modified

Files Changed

  • netwerk/dns/DNSPacket.cpp
diff --git a/netwerk/dns/DNSPacket.cpp b/netwerk/dns/DNSPacket.cpp
index 2fd99eab098..4578c7692b2 100644
--- a/netwerk/dns/DNSPacket.cpp
+++ b/netwerk/dns/DNSPacket.cpp
@@ -646,6 +646,9 @@ nsresult DNSPacket::DecodeInternal(
 
   aCname.Truncate();
 
+  // Reset any type record accumulated by a previous decode of this packet.
+  aTypeResult = mozilla::AsVariant(Nothing());
+
   if (aLen < 12) {
     LOG(("TRR bad incoming DOH, eject!\n"));
     return NS_ERROR_ILLEGAL_VALUE;
Loading diff…