CVE-2017-5411

A use-after-free can occur during buffer storage operations within the ANGLE graphics library, used for WebGL content. The buffer storage can be freed while still in use in some circumstances, leading to a potentially exploitable crash. Note: This issue is in "libGLES", which is only in use on Windows. Other operating systems are not affected. This vulnerability affects Firefox < 52 and Thunderbird < 52.

• CWE-416

• http://www.securityfocus.com/bid/96692Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1037966Third Party Advisory, VDB Entry
• https://bugzilla.mozilla.org/show_bug.cgi?id=1325511Exploit, Issue Tracking, Vendor Advisory
• https://www.mozilla.org/security/advisories/mfsa2017-05/Vendor Advisory
• https://www.mozilla.org/security/advisories/mfsa2017-09/Vendor Advisory
• http://www.securityfocus.com/bid/96692Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1037966Third Party Advisory, VDB Entry
• https://bugzilla.mozilla.org/show_bug.cgi?id=1325511Exploit, Issue Tracking, Vendor Advisory
• https://www.mozilla.org/security/advisories/mfsa2017-05/Vendor Advisory
• https://www.mozilla.org/security/advisories/mfsa2017-09/Vendor Advisory

Published

Jun 11, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-5405Certain response codes in FTP connections can result in the …
• CVE-2017-5406A segmentation fault can occur in the Skia graphics library …
• CVE-2017-5407Using SVG filters that don't use the fixed point math implem…
• CVE-2017-5408Video files loaded video captions cross-origin without check…
• CVE-2017-5409The Mozilla Windows updater can be called by a non-privilege…
• CVE-2017-5410Memory corruption resulting in a potentially exploitable cra…
• CVE-2017-5412A buffer overflow read during SVG filter color value operati…
• CVE-2017-5413A segmentation fault can occur during some bidirectional lay…
• CVE-2017-5414The file picker dialog can choose and display the wrong loca…
• CVE-2017-5415An attack can use a blob URL and script to spoof an arbitrar…
• CVE-2017-5416In certain circumstances a networking event listener can be …
• CVE-2017-5417When dragging content from the primary browser pane to the a…