CVE-2018-5126

Memory safety bugs were reported in Firefox 58. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Firefox < 59.

• CWE-119

• http://www.securityfocus.com/bid/103386Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1040514Third Party Advisory, VDB Entry
• https://bugzilla.mozilla.org/buglist.cgi?bug_id=1433671%2C1414768%2C1416523%2C1425691%2C1441006%2C1429768%2C1426002%2C1297740%2C1435566%2C1432855%2C1442318%2C1421963%2C1422631%2C1426603%2C1404297%2C1425257%2C1373934%2C1423173%2C1416940Issue Tracking, Permissions Required, Third Party Advisory
• https://usn.ubuntu.com/3596-1/Third Party Advisory
• https://www.mozilla.org/security/advisories/mfsa2018-06/Vendor Advisory
• http://www.securityfocus.com/bid/103386Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1040514Third Party Advisory, VDB Entry
• https://bugzilla.mozilla.org/buglist.cgi?bug_id=1433671%2C1414768%2C1416523%2C1425691%2C1441006%2C1429768%2C1426002%2C1297740%2C1435566%2C1432855%2C1442318%2C1421963%2C1422631%2C1426603%2C1404297%2C1425257%2C1373934%2C1423173%2C1416940Issue Tracking, Permissions Required, Third Party Advisory
• https://usn.ubuntu.com/3596-1/Third Party Advisory
• https://www.mozilla.org/security/advisories/mfsa2018-06/Vendor Advisory

Published

Jun 11, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-5119The reader view will display cross-origin content when CORS …
• CVE-2018-5121Low descenders on some Tibetan characters in several fonts o…
• CVE-2018-5122A potential integer overflow in the "DoCrypt" function of We…
• CVE-2018-5123A third party website can access information available to a …
• CVE-2018-5124Unsanitized output in the browser UI leaves HTML tags in pla…
• CVE-2018-5125Memory safety bugs were reported in Firefox 58 and Firefox E…
• CVE-2018-5127A buffer overflow can occur when manipulating the SVG "anima…
• CVE-2018-5128A use-after-free vulnerability can occur when manipulating e…
• CVE-2018-5129A lack of parameter validation on IPC messages results in a …
• CVE-2018-5130When packets with a mismatched RTP payload type are sent in …
• CVE-2018-5131Under certain circumstances the "fetch()" API can return tra…
• CVE-2018-5132The Find API for WebExtensions can search some privileged pa…