Medium firefox Logic Error 🔧 Commit mapped

Overview

Medium
Severity
CVSS
No
Exploited ITW
Fixed
Fix Status
Impactmoderate
DescriptionInformation disclosure due to side-channel in the Storage: Cache API component
ComponentDOM
Bug ClassLogic Error
Tracker2025732
Fix commit2eb4d9c5af74 (firefox) +2/-2
CISA KEVNot listed
CreditedTomoya Nakanishi
Disclosed2026-08-18

Files Changed

  • dom/cache/FileUtils.cpp
  • dom/fetch/InternalResponse.cpp
diff --git a/dom/cache/FileUtils.cpp b/dom/cache/FileUtils.cpp
index ff556bfc326..298a5773353 100644
--- a/dom/cache/FileUtils.cpp
+++ b/dom/cache/FileUtils.cpp
@@ -43,7 +43,7 @@ namespace {
 
 // Const variable for generate padding size.
 // XXX This will be tweaked to something more meaningful in Bug 1383656.
-const int64_t kRoundUpNumber = 20480;
+const int64_t kRoundUpNumber = 131072;
 
 // At the moment, the encrypted stream block size is assumed to be unchangeable
 // between encrypting and decrypting blobs. This assumptions holds as long as we
diff --git a/dom/fetch/InternalResponse.cpp b/dom/fetch/InternalResponse.cpp
index f75b9597d97..55e0d918ef7 100644
--- a/dom/fetch/InternalResponse.cpp
+++ b/dom/fetch/InternalResponse.cpp
@@ -23,7 +23,7 @@ namespace {
 
 // Const variable for generate padding size
 // XXX This will be tweaked to something more meaningful in Bug 1383656.
-const uint32_t kMaxRandomNumber = 102400;
+const uint32_t kMaxRandomNumber = 1048576;
 
 }  // namespace
 
Loading diff…