Summary
It was discovered that NSS incorrectly handled memory when performing
certain GHASH operations. A remote attacker could use this issue to cause
NSS to crash, resulting in a denial of service, or possibly execute
arbitrary code.
Fixed packages 3
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 22.04 LTS 22.04:LTS | nss | 2:3.98-0ubuntu0.22.04.3 |
| Ubuntu · 24.04 LTS 24.04:LTS | nss | 2:3.98-1ubuntu0.1 |
| Ubuntu · 25.10 | nss | 2:3.114-1ubuntu0.1 |
Vulnerabilities 1
-
High 8.8
Integer overflow in the Libraries component in NSS
Integer overflow in the Libraries component in NSS. This vulnerability was fixed in Firefox 148, Firefox ESR 140.8, Thunderbird 148, Thunderbird 140.8, and Firefox ESR 115.35.
References
-
report
https://ubuntu.com/security/CVE-2026-2781