| Package | Affected versions | Patched versions |
|---|---|---|
| firefox | < 60.4.0< 64.0 | 60.4.064.0 |
| thunderbird | < 60.4.0 | 60.4.0 |
A buffer overflow can occur in the Skia library during buffer offset calculations with hardware accelerated canvas 2D actions due to the use of 32-bit calculations instead of 64-bit. This results in a potentially exploitable crash. This vulnerability affects Thunderbird < 60.4, Firefox ESR < 60.4, and Firefox < 64.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free