CVE-2018-5183

critical

Description

Mozilla developers backported selected changes in the Skia library. These changes correct memory corruption issues including invalid buffer reads and writes during graphic operations. This vulnerability affects Thunderbird ESR < 52.8, Thunderbird < 52.8, and Firefox ESR < 52.8.

References

Advisories
More

https://www.debian.org/security/2018/dsa-4209

https://www.debian.org/security/2018/dsa-4199

https://usn.ubuntu.com/3660-1/

https://security.gentoo.org/glsa/201811-13

https://security.gentoo.org/glsa/201810-01

https://lists.debian.org/debian-lts-announce/2018/05/msg00013.html

https://lists.debian.org/debian-lts-announce/2018/05/msg00007.html

https://access.redhat.com/errata/RHSA-2018:1726

https://access.redhat.com/errata/RHSA-2018:1725

https://access.redhat.com/errata/RHSA-2018:1415

https://access.redhat.com/errata/RHSA-2018:1414

http://www.securitytracker.com/id/1040898

http://www.securityfocus.com/bid/104138

https://www.mozilla.org/security/advisories/mfsa2018-13/

https://www.mozilla.org/security/advisories/mfsa2018-12/

https://euvd.enisa.europa.eu/vulnerability/EUVD-2018-16968

https://bugzilla.mozilla.org/show_bug.cgi?id=1454692

Details

Source: Mitre, NVD

Published: 2018-06-11

Updated: 2026-06-17

Risk Information

CVSS v2

Base Score: 7.5

Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P

Severity: High

CVSS v3

Base Score: 9.8

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Severity: Critical

EPSS

EPSS: 0.03139