| 1563012
|
|
[W64] Firefox 69.0 beta (32-bit) quits after repeating loading long (HTTP) URL in iframe
|
Core
|
DOM: Core & HTML
|
nobody
|
UNCO
|
---
|
2022-10-11
|
| 794416
|
|
OOM Crash because user not given chance to stop runaway script.
|
Core
|
DOM: Core & HTML
|
nobody
|
UNCO
|
---
|
2022-10-10
|
| 1743190
|
|
unconstrained memory usage in [@ mozilla::gfx::InlineTranslator::TranslateRecording]
|
Core
|
Graphics
|
bwerth
|
NEW
|
---
|
2025-04-02
|
| 1570206
|
|
OOM on android
|
Core
|
Web Painting
|
nobody
|
NEW
|
---
|
2022-10-11
|
| 1797412
|
|
OOM due to unconstrained memory usage
|
Core
|
Graphics: CanvasWebG
|
nobody
|
NEW
|
---
|
2022-11-30
|
| 1967858
|
|
Possible attacker-controllable OOM and DOS via XMLHttpRequest in loop
|
Core
|
DOM: Networking
|
nobody
|
NEW
|
---
|
2025-06-04
|
| 1248774
|
|
Potential multi platform image parsing bug
|
Core
|
Graphics: ImageLib
|
nobody
|
NEW
|
---
|
2022-10-11
|
| 1297206
|
|
DoS loading a SVG image that consumes all your memory
|
Core
|
SVG
|
nobody
|
NEW
|
---
|
2022-10-11
|
| 1314862
|
|
Mozilla Firefox 49.0.2 - crash-buffer some tools
|
Core
|
DOM: Core & HTML
|
nobody
|
NEW
|
---
|
2022-10-11
|
| 1324152
|
|
OOM in theora
|
Core
|
Audio/Video: Playbac
|
nobody
|
NEW
|
---
|
2022-10-11
|
| 1462008
|
|
Small jpeg triggers runaway memory usage in Firefox 59 -> Nightly
|
Core
|
Graphics: ImageLib
|
nobody
|
NEW
|
---
|
2024-05-30
|
| 1797413
|
|
OOM due to unconstrained memory usage
|
Core
|
DOM: Workers
|
nobody
|
NEW
|
---
|
2024-11-22
|
| 1927354
|
|
Access violation due to memory overflow when using large ArrayBuffer and Web Workers (`MOZ_RELEASE_ASSERT(obj->is<PromiseReactionRecord>());`)
|
Core
|
JavaScript Engine
|
nobody
|
NEW
|
---
|
2024-12-11
|
| 1797415
|
|
OOM due to unconstrained memory usage
|
Core
|
Graphics: WebRender
|
gwatson
|
NEW
|
---
|
2024-04-02
|
| 455100
|
|
A tiny, malicious SVG file (using nested/recursive <use>/<def> elements) causes firefox to stall and use up the system's memory
|
Core
|
SVG
|
nobody
|
NEW
|
---
|
2025-05-06
|
| 798374
|
|
SVG nested patterns allow exponential entity-expansion explosion, leading to hangs, arbitrarily-high memory usage & swapping, and eventual content-process crash
|
Core
|
SVG
|
nobody
|
NEW
|
---
|
2024-07-25
|
| 1235878
|
|
Firefox Network Monitor crash on XML with recursive entities
|
Core
|
XML
|
nobody
|
NEW
|
---
|
2022-10-11
|
| 1698189
|
|
Excessive memory usage trigger by padding
|
Core
|
Graphics: WebRender
|
nobody
|
NEW
|
---
|
2021-04-01
|
| 1715357
|
|
Large allocation after calling [@ mozilla::gfx::DrawTargetSkia::DrawGlyphs]
|
Core
|
Graphics: Canvas2D
|
nobody
|
NEW
|
---
|
2021-06-09
|
| 1715358
|
|
Large allocation after calling [@ mozilla::gfx::DrawTargetSkia::Stroke]
|
Core
|
Graphics: Canvas2D
|
nobody
|
NEW
|
---
|
2021-06-09
|
| 1715360
|
|
Large allocation after calling [@ mozilla::gfx::PathSkia::StrokeContainsPoint]
|
Core
|
Graphics: Canvas2D
|
nobody
|
NEW
|
---
|
2021-06-09
|
| 1715363
|
|
Large allocation after calling [@ mozilla::gfx::PathSkia::GetStrokedBounds]
|
Core
|
Graphics: Canvas2D
|
nobody
|
NEW
|
---
|
2021-06-09
|
| 1716369
|
|
high memory usage in [@ webrender::api_resources::ApiResources::create_blob_scene_builder_requests]
|
Core
|
Graphics: WebRender
|
nobody
|
NEW
|
---
|
2024-04-02
|
| 1763273
|
|
Hit MOZ_CRASH(out of memory: 0x0000000000040000 bytes requested) at /builds/worker/checkouts/gecko/memory/mozalloc/mozalloc_abort.cpp:35
|
Core
|
Graphics: WebRender
|
nobody
|
NEW
|
---
|
2024-11-10
|
| 1785100
|
|
OOM due to unconstrained memory usage
|
Core
|
Graphics
|
nobody
|
NEW
|
---
|
2022-10-17
|
| 1798957
|
|
High CPU and memory consumption with Selection::Stringify using SVG animation
|
Core
|
DOM: Serializers
|
nobody
|
NEW
|
---
|
2022-11-04
|
| 741757
|
|
Reported Crash / vulnerability
|
Core
|
DOM: Core & HTML
|
nobody
|
REOP
|
---
|
2023-03-09
|
| 1388618
|
|
MP4 file triggers SIGILL and OOM
|
Core
|
Audio/Video: Playbac
|
ayang
|
RESO
|
FIXE
|
2017-08-29
|
| 1389299
|
|
OOM in [@ mp4_demuxer::Moof::GetAuxInfo]
|
Core
|
Audio/Video: Playbac
|
ayang
|
RESO
|
FIXE
|
2017-08-27
|
| 1968209
|
|
wasm: correctly handle OOMs related to BaseCompiler::patchHotnessCheck
|
Core
|
JavaScript: WebAssem
|
jseward
|
RESO
|
FIXE
|
2025-06-25
|
| 1296473
|
|
Stagefright: MOZ_CRASH triggered by mp4 [@stagefright::SampleTable::setTimeToSampleParams]
|
Core
|
Audio/Video: Playbac
|
mozbugz
|
RESO
|
FIXE
|
2017-04-25
|
| 885622
|
|
Out-Of-Memory--Memory Corruption issue
|
Firefox
|
General
|
nobody
|
RESO
|
INCO
|
2013-07-02
|
| 1205140
|
|
Unchecked allocation strategy in streaming BER decoding
|
NSS
|
Libraries
|
nobody
|
RESO
|
DUPL
|
2016-11-02
|
| 1819493
|
|
heap-buffer-overflow in [@ AllocateSolidColorFrame]
|
Core
|
WebRTC: Audio/Video
|
apehrson
|
RESO
|
FIXE
|
2023-10-17
|
| 1839258
|
|
AddressSanitizer: global-buffer-overflow on NSS PORT_FreeArena_Util -> PL_ClearArenaPool after calloc and malloc failure
|
NSS
|
Libraries
|
karthik.bhargavan
|
RESO
|
FIXE
|
2025-03-05
|
| 1181718
|
|
mozilla::BlankAudioDataCreator::Create(long, long, long) OOM crash on ASan builds
|
Core
|
Audio/Video: Playbac
|
mozbugz
|
RESO
|
FIXE
|
2015-12-02
|
| 1169831
|
|
crash in OOM | large | NS_ABORT_OOM(unsigned int) | nsAString_internal::SetCapacity(unsigned int) when taking screenshots in responsive UI mode
|
DevTools
|
Responsive Design Mo
|
nobody
|
RESO
|
WORK
|
2020-09-11
|
| 1838197
|
|
AddressSanitizer: stack-buffer-underflow with WRITE of size 260840 (changeable) in NSS from_montgomery
|
NSS
|
Libraries
|
nobody
|
RESO
|
FIXE
|
2024-05-30
|
| 1568427
|
|
debug/bug1264961.js should pass expectExceptionOnFailure = false to oomTest
|
Core
|
JavaScript Engine: J
|
pbone
|
RESO
|
FIXE
|
2019-09-18
|
| 1667480
|
|
MP4 triggers OOM in [@ mozilla::Box::ReadAsSlice]
|
Core
|
Audio/Video: Playbac
|
alwu
|
RESO
|
FIXE
|
2020-10-01
|
| 1374945
|
|
stack exhaustion loading pdf
|
Firefox
|
PDF Viewer
|
cdenizet
|
RESO
|
FIXE
|
2024-06-07
|
| 1798816
|
|
High CPU and memory consumption
|
Core
|
CSS Parsing and Comp
|
emcdonough
|
RESO
|
FIXE
|
2022-11-10
|
| 1235925
|
|
libvpx: OOM Crash [@vp9_get_frame_buffer]
|
Core
|
Audio/Video: Playbac
|
giles
|
RESO
|
FIXE
|
2017-01-18
|
| 1296532
|
|
mp4 triggers OOM [@mp4_demuxer::Saiz::Saiz]
|
Core
|
Audio/Video: Playbac
|
mozbugz
|
RESO
|
FIXE
|
2016-08-26
|
| 1145866
|
|
Allocation size overflow
|
Core
|
DOM: Workers
|
nobody
|
RESO
|
INVA
|
2020-02-27
|
| 1186730
|
|
PSMContentDownloader will OOM if it encounters a zip bomb
|
Core
|
Security: PSM
|
nobody
|
RESO
|
WONT
|
2018-10-01
|
| 1234842
|
|
Firefox crashes while playing sound in JavaScript-Recursion (Data URI .wav)
|
Core
|
Audio/Video: Playbac
|
nobody
|
RESO
|
INAC
|
2021-10-12
|
| 1258817
|
|
WebGl Crash - Struct constructor
|
Core
|
Graphics: CanvasWebG
|
nobody
|
RESO
|
WORK
|
2020-01-09
|
| 1283675
|
|
Large search suggestions can hang or crash browser
|
Firefox
|
Search
|
nobody
|
RESO
|
WORK
|
2021-01-29
|
| 1322307
|
|
Stack overflow in UnbindFromTree
|
Core
|
DOM: Core & HTML
|
nobody
|
RESO
|
DUPL
|
2024-05-30
|
| 1374495
|
|
Firefox crashes when opening too large page.
|
Core
|
Networking
|
nobody
|
RESO
|
INCO
|
2017-11-09
|
| 1425434
|
|
stack overflow in xul!nsLineBreaker::AppendText
|
Core
|
Layout
|
nobody
|
RESO
|
WORK
|
2022-12-01
|
| 1455943
|
|
OOM crashes after appending data in infinite loop
|
Core
|
JavaScript Engine
|
nobody
|
RESO
|
INCO
|
2024-05-30
|
| 1460688
|
|
XSLT format-number index underflow results in crash
|
Core
|
XSLT
|
nobody
|
RESO
|
DUPL
|
2019-12-05
|
| 1464690
|
|
Reproducible crash when running in memory-constrained Docker container
|
Core
|
IPC
|
nobody
|
RESO
|
FIXE
|
2020-12-18
|
| 1277397
|
|
High memory usage triggered by a jpg
|
Core
|
Graphics: ImageLib
|
tnikkel
|
RESO
|
FIXE
|
2023-03-26
|
| 1934869
|
|
Intermittent ==3708==ERROR: AddressSanitizer failed to allocate 0x10000 (65536) bytes of Allocate (error code: 1455)
|
Core
|
Privacy: Anti-Tracki
|
nobody
|
RESO
|
INCO
|
2025-02-24
|
| 1305298
|
|
SEGV in sk_memset32 after GraphicsCriticalError
|
Core
|
Graphics
|
nobody
|
RESO
|
WORK
|
2020-04-21
|
| 1406382
|
|
Unlimited RAM usage on some specific page
|
Core
|
Performance: General
|
nobody
|
RESO
|
WORK
|
2024-07-27
|
| 1276704
|
|
Denial of service based on AddSearchProvider() and XML Entity billion laughs attack
|
Firefox
|
Search
|
standard8
|
RESO
|
FIXE
|
2020-07-10
|
| 1380468
|
|
mp4 file triggers OOM
|
Core
|
Audio/Video: Playbac
|
ayang
|
RESO
|
FIXE
|
2017-09-28
|
| 1240372
|
|
Firefox crash using malformed html tag in iframe
|
Core
|
DOM: Core & HTML
|
ehsan.akhgari
|
RESO
|
FIXE
|
2019-03-13
|
| 1896555
|
|
Crash SIGSEGV GetCaretFrameForNodeOffset at 0xffffffff (32-bit) or 0x0000ffffffff (64-bit) after malloc failure on nsTextFragment::SetTo
|
Core
|
DOM: Core & HTML
|
emilio
|
RESO
|
FIXE
|
2025-03-05
|
| 846741
|
|
OOM with document.write() of a large string
|
Core
|
JavaScript Engine
|
general
|
RESO
|
WONT
|
2024-05-30
|
| 1293911
|
|
libpng: call to malloc with negative in [@ png_read_buffer]
|
Core
|
Graphics: ImageLib
|
glennrp+bmo
|
RESO
|
FIXE
|
2020-02-16
|
| 1238582
|
|
Assertion failure: (strElements.resize(2 * len)), at js/src/jsarray.cpp:1762 with OOM
|
Core
|
JavaScript Engine
|
jcoppeard
|
RESO
|
FIXE
|
2016-01-28
|
| 1601851
|
|
@ OOM | large | NS_ABORT_OOM | nsTArray_base<T>::EnsureCapacity<T> | gfxTextRun::GetAdvanceWidth
|
Core
|
Graphics: Text
|
jfkthame
|
RESO
|
FIXE
|
2020-04-17
|
| 1711133
|
|
high memory usage in [@ webrender_bindings::moz2d_renderer::rasterize_blob]
|
Core
|
Graphics: WebRender
|
jmuizelaar
|
RESO
|
FIXE
|
2022-09-02
|
| 1711142
|
|
high memory usage in [@ webrender::api_resources::ApiResources::create_blob_scene_builder_requests]
|
Core
|
Graphics: WebRender
|
jmuizelaar
|
RESO
|
FIXE
|
2022-01-07
|
| 995075
|
|
OOM large null-offset write in update_filter() triggered with AudioBufferSourceNode
|
Core
|
Web Audio
|
karlt
|
RESO
|
FIXE
|
2016-06-04
|
| 1715136
|
|
Large allocation in [@ mozilla::gfx::ConvolutionFilter::ComputeResizeFilter]
|
Core
|
Graphics: ImageLib
|
lsalzman
|
RESO
|
FIXE
|
2024-03-19
|
| 992274
|
|
Assertion failure: i < mLength, at ../../dist/include/mozilla/Vector.h:379
|
Core
|
JavaScript Engine
|
n.nethercote
|
RESO
|
FIXE
|
2015-08-30
|
| 151380
|
|
XML document can hang Mozilla through entity expansion (billion laughs)
|
Core
|
XML
|
nobody
|
RESO
|
WORK
|
2022-01-19
|
| 608554
|
|
Firefox crashes when executing the given javascript
|
Firefox
|
Security
|
nobody
|
RESO
|
FIXE
|
2012-09-23
|
| 771622
|
|
An Html page can crash mozilla firefox (document.write causing OOM abort / 100% CPU)
|
Firefox
|
General
|
nobody
|
RESO
|
DUPL
|
2018-02-14
|
| 778929
|
|
Firefox 14.0.1 OOM when document.write() large strings in a loop
|
Firefox
|
Untriaged
|
nobody
|
RESO
|
WONT
|
2015-02-23
|
| 783026
|
|
OOM crash with tag <Iframe> and long src Mozilla Firefox 14.0.1
|
Core
|
DOM: HTML Parser
|
nobody
|
RESO
|
WONT
|
2014-06-01
|
| 787664
|
|
Out of memory by including lots of huge iframes
|
Firefox
|
Untriaged
|
nobody
|
RESO
|
WORK
|
2016-02-14
|
| 789798
|
|
iframe-induced crash
|
Firefox
|
Untriaged
|
nobody
|
RESO
|
INCO
|
2014-06-01
|
| 790724
|
|
[Workers] DOMException::Create
|
Core
|
DOM: Workers
|
nobody
|
RESO
|
WORK
|
2012-09-17
|
| 790727
|
|
XMLHttpRequest::DispatchPrematureAbortEvent doesn't root type before calling Event::Create
|
Core
|
DOM: Workers
|
nobody
|
RESO
|
WORK
|
2012-09-23
|
| 790728
|
|
nsDOMCameraManager::GetListOfCameras doesn't root a
|
Firefox OS Graveyard
|
General
|
nobody
|
RESO
|
WORK
|
2012-09-23
|
| 795248
|
|
Firefox 15.0.1 crash using window.showModalDialog()
|
Core
|
DOM: Core & HTML
|
nobody
|
RESO
|
WORK
|
2022-06-01
|
| 814254
|
|
T.61-8bit charset is crashy
|
Core
|
Internationalization
|
nobody
|
RESO
|
FIXE
|
2016-06-04
|
| 883818
|
|
DoS vulnerability in Mozilla Firefox
|
Core
|
Security
|
nobody
|
RESO
|
DUPL
|
2020-03-16
|
| 887226
|
|
OOM [@JS_BasicObjectToString mozilla::detail::GuardObjectNotificationReceiver::init nsTArray_Impl<nsIAtom*, nsTArrayInfallibleAllocator>::operator[] obj_toString js::CompartmentChecker::check]
|
Core
|
JavaScript Engine
|
nobody
|
RESO
|
WORK
|
2015-05-13
|
| 905131
|
|
100% CPU core hang, possibly due to xul.dll!NS_CycleCollectorSuspect3
|
Firefox
|
Untriaged
|
nobody
|
RESO
|
INCO
|
2016-02-15
|
| 1006238
|
|
Memory corruption, the call stack show strange values, included in the PoC
|
Firefox
|
Untriaged
|
nobody
|
RESO
|
INVA
|
2014-05-30
|
| 1063391
|
|
Crashing of mozilla firefox 32.0
|
Firefox
|
Untriaged
|
nobody
|
RESO
|
DUPL
|
2018-02-14
|
| 1169918
|
|
If I visit somewhere with a window.open busy-loop, Firefox freezes
|
Firefox
|
Untriaged
|
nobody
|
RESO
|
DUPL
|
2015-09-07
|
| 1184014
|
|
Crash with large URI: [@ OOM | large | NS_ABORT_OOM(unsigned int) | nsACString_internal::Assign(char const*) | nsDataHandler::ParseURI(nsCString&, nsCString&, nsCString&, bool&, nsCString&, nsCString&) ]
|
Core
|
Networking
|
nobody
|
RESO
|
DUPL
|
2024-05-30
|
| 1233102
|
|
gif triggers OOM crash in [@mozilla::image::Deinterlacer::Deinterlacer]
|
Core
|
Graphics: ImageLib
|
nobody
|
RESO
|
DUPL
|
2017-01-02
|
| 1235924
|
|
libvpx: OOM Crash [@vp9_get_frame_buffer]
|
Core
|
Audio/Video: Playbac
|
nobody
|
RESO
|
DUPL
|
2015-12-30
|
| 1248132
|
|
php code that crashes firefox but not chrome
|
Core
|
DOM: HTML Parser
|
nobody
|
RESO
|
WONT
|
2018-10-01
|
| 1253501
|
|
graphite2: OOM in [@Parameters::testFileFont()] gr2FontTest.cpp
|
Core
|
Graphics: Text
|
nobody
|
RESO
|
FIXE
|
2020-02-16
|
| 1254161
|
|
SVG Viewer DoS vulnerability
|
Core
|
SVG
|
nobody
|
RESO
|
DUPL
|
2016-03-07
|
| 1295044
|
|
libjpeg-turbo: unsigned integer overflow in [@realize_virt_arrays]
|
Core
|
Graphics: ImageLib
|
nobody
|
RESO
|
FIXE
|
2017-01-17
|
| 1311868
|
|
MPEG4 AAC crash "exploitable" - ZN5alloc3oom3oom17h7d76e900cfacf1cfE
|
Core
|
Audio/Video: Playbac
|
nobody
|
RESO
|
FIXE
|
2016-12-11
|
| 1322149
|
|
looped string-doubling Out of memory Crash
|
Firefox
|
Untriaged
|
nobody
|
RESO
|
WONT
|
2016-12-28
|
| 1322481
|
|
Mozilla Crashes exhaustion of memory using Integer Overflow
|
Firefox
|
Untriaged
|
nobody
|
RESO
|
WONT
|
2016-12-12
|
| 1341744
|
|
Firefox 51.0.1 will continually freeze then crash via NS_ConvertUTF16toUTF8::NS_ConvertUTF16toUTF8
|
Core
|
General
|
nobody
|
RESO
|
INCO
|
2017-10-11
|
| 1563322
|
|
out-of-memory while fuzzing MP4
|
Core
|
Audio/Video: Playbac
|
nobody
|
RESO
|
INVA
|
2020-01-09
|
| 1659855
|
|
DOS requiring reboot of user’s computer & memory corruption (Tested in linux)
|
Firefox
|
Security
|
nobody
|
RESO
|
DUPL
|
2024-09-15
|
| 1674331
|
|
Canvas OOM
|
Emerging Markets Gra
|
Security: Firefox L
|
nobody
|
RESO
|
WONT
|
2024-05-30
|
| 1674332
|
|
Fenix allows content processes to allocate lots of memory leading to Android closing other apps / being very slow
|
Core
|
JavaScript Engine
|
nobody
|
RESO
|
INVA
|
2024-05-30
|
| 1674451
|
|
Integer Overflow (prevent Android WebView crash/exception from taking down the whole app)
|
Emerging Markets Gra
|
Security: Firefox L
|
nobody
|
RESO
|
INCO
|
2022-02-09
|
| 1710178
|
|
high memory usage in [@ mozilla::gfx::Factory::CreateDrawTargetForData]
|
Core
|
Graphics
|
nobody
|
RESO
|
FIXE
|
2022-01-07
|
| 1716829
|
|
Large allocation [@ webrender::api_resources::ApiResources::update]
|
Core
|
Graphics: WebRender
|
nobody
|
RESO
|
WORK
|
2022-08-16
|
| 1783090
|
|
Large allocation in [@ webrender::platform::unix::font::FontContext::rasterize_glyph]
|
Core
|
Graphics: WebRender
|
nobody
|
RESO
|
WORK
|
2022-08-18
|
| 1800619
|
|
increase the count of item & verify it is added to cart
|
Invalid Bugs
|
General
|
nobody
|
RESO
|
INVA
|
2022-11-15
|
| 1844821
|
|
firefox
|
Toolkit
|
Crash Reporting
|
nobody
|
RESO
|
WORK
|
2023-08-08
|
| 1962917
|
|
Denial-of-Service (DoS) resource exhaustion via Browser Extension and Malicious HTML
|
Firefox
|
Security
|
nobody
|
RESO
|
WONT
|
2025-04-29
|
| 1253101
|
|
SEC_ASN1Decode should not allocate more than a 'sane' amount of memory
|
NSS
|
Libraries
|
ryan.sleevi
|
RESO
|
FIXE
|
2017-02-12
|
| 1761275
|
|
SEGV on libwebp WebPSafeFree -> malloc_decls.h free
|
Core
|
Graphics: ImageLib
|
ryanvm
|
RESO
|
FIXE
|
2024-05-30
|
| 969309
|
|
Assertion failure: masm.currentOffset() - lastOsiPointOffset_ >= Assembler::patchWrite_NearCallSize(), at jit/shared/CodeGenerator-shared.cpp:423
|
Core
|
JavaScript Engine
|
sean.stangl
|
RESO
|
FIXE
|
2016-07-02
|
| 1262549
|
|
High memory usage triggered by a gif
|
Core
|
Graphics: ImageLib
|
seth.bugzilla
|
RESO
|
FIXE
|
2020-04-25
|
| 1236227
|
|
Firefox allocates too much memory for TextDecoder
|
Core
|
DOM: Core & HTML
|
smaug
|
RESO
|
FIXE
|
2019-03-13
|
| 1841368
|
|
Access violation on mozilla::dom::Element::BindToTree after realloc failure on AttrArray::GrowBy
|
Core
|
DOM: Core & HTML
|
smaug
|
RESO
|
FIXE
|
2024-05-30
|
| 1839235
|
|
ThreadSanitizer: data race [@ mozilla::layers::VideoBridgeChild::ActorDestroy] vs. [@ mozilla::KnowsCompositorVideo::GetTextureForwarder] on mCanSend
|
Core
|
Graphics
|
sotaro.ikeda.g
|
RESO
|
FIXE
|
2024-01-03
|
| 1240984
|
|
Large transferables (worker, postMessage) cause OOM
|
Core
|
JavaScript Engine
|
sphink
|
RESO
|
FIXE
|
2017-11-06
|
| 1016545
|
|
memory leak that kills Firefox in few seconds
|
Core
|
Disability Access AP
|
tbsaunde+mozbugs
|
RESO
|
FIXE
|
2024-05-30
|
| 854788
|
|
Crash [@ js::Proxy::objectClassIs] with [@ js::ObjectClassIs] and [@ js::DirectProxyHandler::objectClassIs] on the stack
|
Core
|
JavaScript Engine
|
terrence.d.cole
|
RESO
|
FIXE
|
2013-04-13
|
| 1410381
|
|
Some various PDF files are causing massive memory leak/usage
|
Firefox
|
PDF Viewer
|
jcoppeard
|
VERI
|
FIXE
|
2019-05-21
|
| 1562298
|
|
Crash [@ js::frontend::FullParseHandler::addClassMemberDefinition] with OOM
|
Core
|
JavaScript Engine
|
nobody
|
VERI
|
FIXE
|
2023-12-06
|
| 1839007
|
|
Access Violation on IsPatternMatching -> JS_GetProperty -> JS_ForwardGetPropertyTo
|
Core
|
JavaScript Engine
|
bthrall
|
VERI
|
FIXE
|
2024-05-30
|
| 1252707
|
|
Crash [@ IsInsideNursery] with OOM and use-after-free
|
Core
|
JavaScript Engine
|
bhackett1024
|
VERI
|
FIXE
|
2017-05-09
|
| 1241731
|
|
Assertion failure: tag >= SCTAG_TRANSFER_MAP_PENDING_ENTRY, at js/src/vm/StructuredClone.cpp:429 with OOM
|
Core
|
JavaScript Engine
|
jcoppeard
|
VERI
|
FIXE
|
2016-09-22
|
| 1781961
|
|
Large allocation [@ wgpu_core::device::Device$LT$A$GT$::create_bind_group_layout]
|
Core
|
Graphics: WebGPU
|
nobody
|
VERI
|
FIXE
|
2022-09-22
|
| 1241728
|
|
BMP: OOM in [@skia::resize::ComputeFilters]
|
Core
|
Graphics: ImageLib
|
tnikkel
|
VERI
|
FIXE
|
2016-07-28
|