CVE-2017-5471

Memory safety bugs were reported in Firefox 53. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Firefox < 54.

• CWE-119

• http://www.securityfocus.com/bid/99042Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1038689Third Party Advisory, VDB Entry
• https://bugzilla.mozilla.org/buglist.cgi?bug_id=1349604%2C1318645%2C1361098%2C1361100%2C1341026%2C1349421%2C1360852%2C1299147%2C1352073%2C1354853%2C1366446%2C1342181%2C1343069Issue Tracking, Vendor Advisory
• https://www.mozilla.org/security/advisories/mfsa2017-15/Vendor Advisory
• http://www.securityfocus.com/bid/99042Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1038689Third Party Advisory, VDB Entry
• https://bugzilla.mozilla.org/buglist.cgi?bug_id=1349604%2C1318645%2C1361098%2C1361100%2C1341026%2C1349421%2C1360852%2C1299147%2C1352073%2C1354853%2C1366446%2C1342181%2C1343069Issue Tracking, Vendor Advisory
• https://www.mozilla.org/security/advisories/mfsa2017-15/Vendor Advisory

Published

Jun 11, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-5465An out-of-bounds read while processing SVG content in "Convo…
• CVE-2017-5466If a page is loaded from an original site through a hyperlin…
• CVE-2017-5467A potential memory corruption and crash when using Skia cont…
• CVE-2017-5468An issue with incorrect ownership model of "privateBrowsing"…
• CVE-2017-5469Fixed potential buffer overflows in generated Firefox code d…
• CVE-2017-5470Memory safety bugs were reported in Firefox 53 and Firefox E…
• CVE-2017-5472A use-after-free vulnerability with the frameloader during t…
• CVE-2017-5473Cross-site request forgery (CSRF) vulnerability in ntopng th…
• CVE-2017-5474Open redirect vulnerability in comment.php in Serendipity th…
• CVE-2017-5475comment.php in Serendipity through 2.0.5 allows CSRF in dele…
• CVE-2017-5476Serendipity through 2.0.5 allows CSRF for the installation o…
• CVE-2017-5480Directory traversal vulnerability in inc/files/files.ctrl.ph…