Unscored DLA-1319-1 2 CVEs

firefox-esr - security update

Published Mar 27, 2018 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

Release	Package	Fixed in
Debian · 7	firefox-esr	52.7.2esr-1~deb7u1

Vulnerabilities 2

Unscored —

CVE-2018-5146 Public exploit EPSS 12%

An out of bounds memory write while processing Vorbis audio data was reported through the Pwn2Own contest. This vulnera…

Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine

Jun 11, 2018
Unscored —

CVE-2018-5147

The libtremor library has the same flaw as CVE-2018-5146. This library is used by Firefox in place of libvorbis on Andr…

Mozilla Firefox Firefox ESR firefox Browsers Debian Ubuntu

Jun 11, 2018