Opened 3 weeks ago

Closed 2 weeks ago

#24032 closed enhancement (fixed)

spidermonkey from Firefox-140.17.0esr

Reported by: Joe Locash Owned by: SecurityAdvisory
Priority: elevated Milestone: 98-Security
Component: BOOK Version: git
Severity: high Keywords:
Cc:

Description

These seem relevant:

  • CVE-2026-100769: Use-after-free in the JavaScript: WebAssembly component (high)
  • CVE-2026-100776: Use-after-free in the JavaScript: WebAssembly component (high)
  • CVE-2026-100788: Invalid pointer in the JavaScript: WebAssembly component (high)
  • CVE-2026-100792: JIT miscompilation in the JavaScript: WebAssembly component (high)

​https://www.mozilla.org/en-US/security/advisories/mfsa2026-99/

Note: This is the last 140esr release.

Change History (3)

comment:1 by Joe Locash, 3 weeks ago

Owner: changed from Joe Locash to SecurityAdvisory
Status: assigned → new

Fixed at 931d93b994. Leaving open for SA.

comment:2 by Bruce Dubbs, 3 weeks ago

Milestone: 13.2 → 98-Security

comment:3 by Bruce Dubbs, 2 weeks ago

Resolution: → fixed
Status: new → closed

Advisory sa-13.1-050 has been issued.

Note: See TracTickets for help on using tickets.