Lucene search

K
redhatcveRedhat.comRH:CVE-2019-9796
HistoryApr 05, 2020 - 5:13 p.m.

CVE-2019-9796

2020-04-0517:13:37
redhat.com
access.redhat.com
9

0.009 Low

EPSS

Percentile

82.5%

A use-after-free vulnerability can occur when the SMIL animation controller incorrectly registers with the refresh driver twice when only a single registration is expected. When a registration is later freed with the removal of the animation controller element, the refresh driver incorrectly leaves a dangling pointer to the driver’s observer array. This vulnerability affects Thunderbird < 60.6, Firefox ESR < 60.6, and Firefox < 66.