Severity
High
Analysis Summary
Incorrect alias information in IonMonkey JIT compiler for setting array elements could lead to a type confusion.
Impact
Execute code or trigger crashes on machines running vulnerable Firefox versions.
Affected Vendors
Mozilla
Affected Products
- Firefox
- Firefox ESR
Remediation
Update to version
- Firefox 72.0.1
- Firefox ESR 68.4.1