Mozilla

Mozilla Foundation Security Advisory 2016-25

Use-after-free when using multiple WebRTC data channels

Announced
March 8, 2016
Reporter
Dominique Hazaël-Massieux
Impact
Critical
Products
Firefox, Firefox ESR
Fixed in
  • Firefox 45
  • Firefox ESR 38.7

Description

Security researcher Dominique Hazaël-Massieux reported a use-after-free issue when using multiple WebRTC data channel connections. This causes a potentially exploitable crash when a data channel connection is freed from within a call through it.

References