Due to unexpected data type conversions, a use-after-free could have occurred when interacting with the font cache. We presume that with enough effort this could have been exploited to run arbitrary code. This vulnerability affects Firefox < 88.
Debido a conversiones inesperadas de tipos de datos, podría haberse producido un uso de memoria previamente liberada al interactuar con la caché de fuentes. Presumimos que con suficiente esfuerzo esto podría haber sido explotado para ejecutar código arbitrario. Esta vulnerabilidad afecta a Firefox versiones anteriores a 88
Multiple security issues were discovered in Firefox. If a user were tricked into opening a specially crafted website, an attacker could potentially exploit these to cause a denial of service, spoof the browser UI, bypass security restrictions, trick the user into disclosing confidential information, or execute arbitrary code. Various other issues were also addressed.