Download Firefox

Firefox is no longer supported on Windows 8.1 and below.

Please download Firefox ESR (Extended Support Release) to use Firefox.

Firefox is no longer supported on macOS 10.14 and below.

Please download Firefox ESR (Extended Support Release) to use Firefox.

Firefox Privacy Notice

Mozilla Foundation Security Advisory 2016-25

Use-after-free when using multiple WebRTC data channels

Announced
March 8, 2016
Reporter
Dominique Hazaël-Massieux
Impact
Critical
Products
Firefox, Firefox ESR
Fixed in
  • Firefox 45
  • Firefox ESR 38.7

Description

Security researcher Dominique Hazaël-Massieux reported a use-after-free issue when using multiple WebRTC data channel connections. This causes a potentially exploitable crash when a data channel connection is freed from within a call through it.

References