Firefox · Toolkit
CVE-2026-4687
Sandbox Escape in Toolkit
Overview
High
Severity
—
CVSS
No
Exploited ITW
Fixed
Fix Status
Changed Functions
| Function | Change | Notes |
|---|---|---|
fortoolkit/components/telemetry/other/CombinedStacks.h |
modified |
Files Changed
toolkit/components/telemetry/other/CombinedStacks.h
Patch
diff --git a/toolkit/components/telemetry/other/CombinedStacks.h b/toolkit/components/telemetry/other/CombinedStacks.h
index 5848eb8d603..be8f9e8f24b 100644
--- a/toolkit/components/telemetry/other/CombinedStacks.h
+++ b/toolkit/components/telemetry/other/CombinedStacks.h
@@ -99,6 +99,15 @@ struct ParamTraits<mozilla::Telemetry::CombinedStacks> {
return false;
}
+ for (const auto& stack : aResult->mStacks) {
+ for (const auto& frame : stack) {
+ if (frame.mModIndex != std::numeric_limits<uint16_t>::max() &&
+ frame.mModIndex >= aResult->mModules.size()) {
+ return false;
+ }
+ }
+ }
+
return true;
}
};
Loading diff…
References
On This Page