Due to large allocation checks in Angle for GLSL shaders being too lenient an out-of-bounds access could occur when allocating more than 8192 ints in private shader memory on macOS. This vulnerability affects Firefox < 128, Firefox ESR < 115.13, Thunderbird < 115.13, and Thunderbird < 128.
2024-07-09T15:15:12.273
2025-09-26T03:15:43.017
Modified
CVSSv3.1: 6.3 (MEDIUM)
| Type | Vendor | Product | Version/Range | Vulnerable? |
|---|---|---|---|---|
| Application | mozilla | firefox | < 115.13 | Yes |
| Application | mozilla | firefox | < 128.0 | Yes |
| Application | mozilla | thunderbird | < 115.13 | Yes |
| Application | mozilla | thunderbird | < 128.0 | Yes |