Mozilla · Firefox Esr · CVE-2018-12371
**Name of the Vulnerable Software and Affected Versions**
Firefox ESR versions prior to 60.1
Thunderbird versions prior to 60
Firefox versions prior to 61
**Description**
The issue is caused by an integer overflow vulnerability in the Skia library when allocating memory for edge builders on systems with at least 16 GB of RAM. This results in the use of uninitialized memory, potentially leading to a crash that could be exploited. The vulnerability may allow a remote attacker to cause a denial of service.
**Recommendations**
For Firefox ESR versions prior to 60.1, update to version 60.1 or later.
For Thunderbird versions prior to 60, update to version 60 or later.
For Firefox versions prior to 61, update to version 61 or later.