Endpoint Vulnerability

Out of bounds read in QCMS library

Description

Security researcher Felix Gr bert of Google used the Address Sanitizer tool to discover an out of bounds read in the QCMS color management library while transforming images with certain parameters. This could lead to information disclosure.

Affected Products

Firefox

References

CVE-2015-0811,