Description
The AudioParamTimeline::AudioNodeInputValue function in the Web Audio implementation in Mozilla Firefox before 39.0 and Firefox ESR 38.x before 38.1 does not properly calculate an oscillator rendering range, which allows remote attackers to obtain sensitive information from process memory or cause a denial of service (out-of-bounds read) via unspecified vectors.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 14.04 LTS | firefox | 39.0+build5-0ubuntu0.14.04.1 | USN-2656-1 |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 7 | firefox | 38.1.0-1.el7_1 | RHSA-2015:1207 |
| RHEL 6 | firefox | 38.1.0-1.el6_6 | RHSA-2015:1207 |
| RHEL 5 | firefox | 38.1.0-1.el5_11 | RHSA-2015:1207 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | MozillaFirefox | 50.1.0-1.1 | openSUSE-SU-2024:10071-1 |
| openSUSE Tumbleweed | MozillaThunderbird | 45.5.1-1.1 | openSUSE-SU-2024:10230-1 |
| openSUSE Tumbleweed | firefox-esr | 128.5.1-1.1 | openSUSE-SU-2024:14572-1 |
Oracle Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Oracle Linux 7 | firefox | 38.1.0-1.0.1.el7_1 | ELSA-2015-1207 |
Advisories 6
- RHSA-2015:1207 Red Hat Security Advisory: firefox security update Red Hat Security Advisories (RHSA) · Jun 26, 2026
- USN-2656-1 firefox vulnerabilities Ubuntu Security Notices (USN) · May 29, 2026
- openSUSE-SU-2024:10230-1 MozillaThunderbird-45.5.1-1.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2024:14572-1 firefox-esr-128.5.1-1.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2024:10071-1 MozillaFirefox-50.1.0-1.1 on GA media SUSE / openSUSE Security Updates · May 7, 2025
- ELSA-2015-1207 Critical: firefox security update (Oracle Linux 7) Oracle Linux Security Advisories (ELSA) · Jul 3, 2015
References
- openSUSE-SU-2015:1229 vendor-advisory
- GLSA-201512-10 vendor-advisory
- 75541 vdb-entry
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- RHSA-2015:1207 vendor-advisory
- USN-2656-1 vendor-advisory
- https://bugzilla.mozilla.org/show_bug.cgi?id=1122218
- http://www.mozilla.org/security/announce/2015/mfsa2015-62.html
- 1032783 vdb-entry
- USN-2656-2 vendor-advisory
- http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html