Summary
Haruto Kimura discovered that NSS had incorrecty handled parsing PKCS#11
URI escape sequences. An attacker could possibly use this issue to cause
NSS to crash, resulting in a denial of service, or obtain sensitive
information.
Fixed packages 4
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 22.04 LTS 22.04:LTS | nss | 2:3.98-0ubuntu0.22.04.4 |
| Ubuntu · 24.04 LTS 24.04:LTS | nss | 2:3.98-1ubuntu0.2 |
| Ubuntu · 25.10 | nss | 2:3.114-1ubuntu0.2 |
| Ubuntu · 26.04 LTS 26.04:LTS | nss | 2:3.120-1ubuntu2.1 |
Vulnerabilities 1
-
High 7.3
Incorrect boundary conditions in the Libraries component in NSS
Incorrect boundary conditions in the Libraries component in NSS. This vulnerability was fixed in Firefox 152 and Thunderbird 152.
References
-
report
https://ubuntu.com/security/CVE-2026-12318