Mozilla Foundation Security Advisory 2016-25
Use-after-free when using multiple WebRTC data channels
- Announced
- March 8, 2016
- Reporter
- Dominique Hazaël-Massieux
- Impact
- Critical
- Products
- Firefox, Firefox ESR
- Fixed in
-
- Firefox 45
- Firefox ESR 38.7
Description
Security researcher Dominique Hazaël-Massieux reported a use-after-free issue when using multiple WebRTC data channel connections. This causes a potentially exploitable crash when a data channel connection is freed from within a call through it.