Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

Firefox Crashes When Decompressing Malformed Files

published 4 years ago

Summary

A bug in Firefox's decompression code can cause the browser to crash if it encounters a specially crafted file. This could lead to data loss or other issues if the user is not able to recover their work. Firefox users should update to the latest version to ensure they have the fix.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software

Ecosystem	Vendor	Product	Affected versions
OSS-Fuzz	–	grok	All versions

Original advisory text

Heap-buffer-overflow in grk::PacketLengthMarkers::readPLM

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=45622

```
Crash type: Heap-buffer-overflow READ 1
Crash state:
grk::PacketLengthMarkers::readPLM
grk::CodeStreamDecompress::process_marker
grk::CodeStreamDecompress::readHeaderProcedureImpl
```

References

https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=45622 Third Party Advisory

Timeline

Published18 Mar 2022

Updated6 Mar 2026

First seen6 Mar 2026

Track software like this

Free during beta