CVE-2017-5392

Severity: critical (CVSS 9.8 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.7% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2018-06-11 · updated 2026-06-17
Weakness: CWE-119

Description

Weak proxy objects have weak references on multiple threads when they should only have them on one, resulting in incorrect memory usage and corruption, which leads to potentially exploitable crashes. Note: This issue only affects Firefox for Android. Other operating systems are not affected. This vulnerability affects Firefox < 51.

Affected products

Mozilla Firefox: before 51.0 — fixed in 51.0

How to fix

Upgrade to a fixed version: Mozilla Firefox 51.0. Check the vendor advisory for mitigations.

References

http://www.securityfocus.com/bid/95763
http://www.securitytracker.com/id/1037693
https://bugzilla.mozilla.org/show_bug.cgi?id=1293709
https://www.mozilla.org/security/advisories/mfsa2017-01/
http://www.securityfocus.com/bid/95763
http://www.securitytracker.com/id/1037693
https://bugzilla.mozilla.org/show_bug.cgi?id=1293709
https://www.mozilla.org/security/advisories/mfsa2017-01/

Get alerted when CVE-2017-5392 or the next vulnerability affects your stack