[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2015-2738":6},{"stargazers_count":4,"fetched_at":5},7,"2026-06-05T08:55:32.481Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":18,"aliases":19,"duplicate_of":9,"upstream":20,"downstream":21,"duplicates":54,"related":55,"reserved_at":9,"published_at":65,"modified_at":66,"state":67,"summary":68,"references_raw":77,"kevs":171,"epss":172,"epss_history":175,"metrics":431,"affected":434},"CVE-2015-2738","The YCbCrImageDataDeserializer::ToDataSourceSurface function in the YCbCr implementation in Mozilla Firefox before 39.0, Firefox ESR 31.x before 31.8 and 38.x before 38.1, and Thunderbird before 38.1 reads data from uninitialized memory locations, which has unspecified impact and attack vectors.",null,[11],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":9,"likelihood_of_exploit":9,"capec":17},"CWE-17","DEPRECATED: Code","This entry has been deprecated.  It was originally used for organizing the Development View (CWE-699) and some other views, but it introduced unnecessary complexity and depth to the resulting tree.","category","Deprecated",[],[],[],[],[22,24,26,28,30,32,34,36,38,40,42,44,46,48,50,52],{"_key":23},"RHSA-2015:1207",{"_key":25},"RHSA-2015:1455",{"_key":27},"OPENSUSE-SU-2024:10071-1",{"_key":29},"SUSE-SU-2015:1268-1",{"_key":31},"SUSE-SU-2015:1268-2",{"_key":33},"SUSE-SU-2015:1269-1",{"_key":35},"SUSE-SU-2015:1449-1",{"_key":37},"OPENSUSE-SU-2024:10230-1",{"_key":39},"OPENSUSE-SU-2024:14572-1",{"_key":41},"DSA-3300-1",{"_key":43},"DSA-3324-1",{"_key":45},"MGASA-2015-0268",{"_key":47},"MGASA-2015-0284",{"_key":49},"UBUNTU-CVE-2015-2738",{"_key":51},"USN-2656-1",{"_key":53},"USN-2673-1",[],[56,57,58,59,60,61,62,63,64],{"_key":27},{"_key":29},{"_key":31},{"_key":33},{"_key":35},{"_key":37},{"_key":39},{"_key":45},{"_key":47},"2015-07-06T01:00:00.000Z","2024-08-06T05:24:38.469Z","Modified",{"cisa_kev":69,"cisa_ransomware":69,"cisa_vendor":9,"epss_severity":70,"epss_score":71,"severity":72,"severity_score":73,"severity_version":74,"severity_source":75,"severity_vector":76,"severity_status":67},false,"low",0.01252,"high",10,"v2.0","nvd","AV:N/AC:L/Au:N/C:C/I:C/A:C",[78,85,90,95,100,106,111,116,121,126,130,134,139,143,147,151,155,159,163,167],{"url":79,"sources":80,"tags":82},"http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00025.html",[81,75],"cve.org",[83,84],"Vendor Advisory","X Refsource SUSE",{"url":86,"sources":87,"tags":88},"http://rhn.redhat.com/errata/RHSA-2015-1455.html",[81,75],[83,89],"X Refsource REDHAT",{"url":91,"sources":92,"tags":93},"http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00033.html",[81,75],[83,84,94],"Third Party Advisory",{"url":96,"sources":97,"tags":98},"https://security.gentoo.org/glsa/201512-10",[81,75],[83,99],"X Refsource GENTOO",{"url":101,"sources":102,"tags":103},"http://www.securityfocus.com/bid/75541",[81,75],[104,105],"VDB Entry","X Refsource BID",{"url":107,"sources":108,"tags":109},"http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html",[81,75],[110,94],"X Refsource CONFIRM",{"url":112,"sources":113,"tags":114},"http://www.debian.org/security/2015/dsa-3324",[81,75],[83,115,94],"X Refsource DEBIAN",{"url":117,"sources":118,"tags":119},"http://www.ubuntu.com/usn/USN-2673-1",[81,75],[83,120,94],"X Refsource UBUNTU",{"url":122,"sources":123,"tags":124},"http://www.securitytracker.com/id/1032784",[81,75],[104,125],"X Refsource SECTRACK",{"url":127,"sources":128,"tags":129},"http://rhn.redhat.com/errata/RHSA-2015-1207.html",[81,75],[83,89],{"url":131,"sources":132,"tags":133},"http://www.mozilla.org/security/announce/2015/mfsa2015-66.html",[81,75],[110,83],{"url":135,"sources":136,"tags":137},"https://bugzilla.mozilla.org/show_bug.cgi?id=1167356",[81,75],[110,138],"Issue Tracking",{"url":140,"sources":141,"tags":142},"http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00034.html",[81,75],[83,84,94],{"url":144,"sources":145,"tags":146},"http://lists.opensuse.org/opensuse-security-announce/2015-07/msg00031.html",[81,75],[83,84],{"url":148,"sources":149,"tags":150},"http://www.ubuntu.com/usn/USN-2656-1",[81,75],[83,120],{"url":152,"sources":153,"tags":154},"http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00021.html",[81,75],[83,84],{"url":156,"sources":157,"tags":158},"http://www.securitytracker.com/id/1032783",[81,75],[104,125],{"url":160,"sources":161,"tags":162},"http://www.debian.org/security/2015/dsa-3300",[81,75],[83,115],{"url":164,"sources":165,"tags":166},"http://www.ubuntu.com/usn/USN-2656-2",[81,75],[83,120],{"url":168,"sources":169,"tags":170},"http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html",[81,75],[110,94],[],{"date":173,"score":71,"percentile":174},"2026-06-04",0.79674,[176,180,183,186,189,191,194,197,199,202,205,208,211,213,216,219,222,225,228,231,234,237,240,243,246,249,251,253,256,259,262,264,266,268,271,274,277,280,283,286,288,291,294,297,300,303,306,309,311,314,317,320,323,326,329,332,335,338,341,344,347,350,352,355,358,361,364,367,370,373,376,378,381,384,387,390,393,396,399,401,404,407,410,413,415,417,420,423,426,428],{"date":177,"score":178,"percentile":179},"2025-11-04",0.00945,0.75545,{"date":181,"score":178,"percentile":182},"2025-11-05",0.75541,{"date":184,"score":178,"percentile":185},"2025-11-06",0.75537,{"date":187,"score":178,"percentile":188},"2025-11-07",0.75552,{"date":190,"score":178,"percentile":188},"2025-11-08",{"date":192,"score":178,"percentile":193},"2025-11-09",0.75551,{"date":195,"score":178,"percentile":196},"2025-11-10",0.75539,{"date":198,"score":178,"percentile":182},"2025-11-11",{"date":200,"score":178,"percentile":201},"2025-11-12",0.75561,{"date":203,"score":178,"percentile":204},"2025-11-13",0.75568,{"date":206,"score":178,"percentile":207},"2025-11-14",0.75573,{"date":209,"score":178,"percentile":210},"2025-11-15",0.7557,{"date":212,"score":178,"percentile":210},"2025-11-16",{"date":214,"score":178,"percentile":215},"2025-11-17",0.75562,{"date":217,"score":178,"percentile":218},"2025-11-18",0.74332,{"date":220,"score":178,"percentile":221},"2025-11-19",0.74341,{"date":223,"score":178,"percentile":224},"2025-11-20",0.7435,{"date":226,"score":178,"percentile":227},"2025-11-21",0.75592,{"date":229,"score":178,"percentile":230},"2025-11-22",0.75591,{"date":232,"score":178,"percentile":233},"2025-11-23",0.75576,{"date":235,"score":178,"percentile":236},"2025-11-24",0.75575,{"date":238,"score":178,"percentile":239},"2025-11-25",0.7558,{"date":241,"score":178,"percentile":242},"2025-11-26",0.75587,{"date":244,"score":178,"percentile":245},"2025-11-27",0.75588,{"date":247,"score":178,"percentile":248},"2025-11-28",0.75579,{"date":250,"score":178,"percentile":239},"2025-11-29",{"date":252,"score":178,"percentile":233},"2025-11-30",{"date":254,"score":178,"percentile":255},"2025-12-01",0.75704,{"date":257,"score":178,"percentile":258},"2025-12-02",0.75711,{"date":260,"score":178,"percentile":261},"2025-12-03",0.75699,{"date":263,"score":178,"percentile":204},"2025-12-04",{"date":265,"score":178,"percentile":233},"2025-12-05",{"date":267,"score":178,"percentile":239},"2025-12-06",{"date":269,"score":71,"percentile":270},"2025-12-07",0.78734,{"date":272,"score":71,"percentile":273},"2025-12-08",0.78738,{"date":275,"score":71,"percentile":276},"2025-12-09",0.78756,{"date":278,"score":71,"percentile":279},"2025-12-10",0.78779,{"date":281,"score":71,"percentile":282},"2025-12-11",0.78795,{"date":284,"score":71,"percentile":285},"2025-12-12",0.78816,{"date":287,"score":71,"percentile":285},"2025-12-13",{"date":289,"score":71,"percentile":290},"2025-12-14",0.78814,{"date":292,"score":71,"percentile":293},"2025-12-15",0.78813,{"date":295,"score":71,"percentile":296},"2025-12-16",0.78824,{"date":298,"score":71,"percentile":299},"2025-12-17",0.78832,{"date":301,"score":71,"percentile":302},"2025-12-18",0.7885,{"date":304,"score":71,"percentile":305},"2025-12-19",0.78862,{"date":307,"score":71,"percentile":308},"2025-12-20",0.78857,{"date":310,"score":71,"percentile":302},"2025-12-21",{"date":312,"score":71,"percentile":313},"2025-12-22",0.78852,{"date":315,"score":71,"percentile":316},"2025-12-23",0.78853,{"date":318,"score":71,"percentile":319},"2025-12-24",0.78866,{"date":321,"score":71,"percentile":322},"2025-12-25",0.78886,{"date":324,"score":71,"percentile":325},"2025-12-26",0.78883,{"date":327,"score":71,"percentile":328},"2025-12-27",0.78936,{"date":330,"score":71,"percentile":331},"2025-12-28",0.78873,{"date":333,"score":71,"percentile":334},"2025-12-29",0.78868,{"date":336,"score":71,"percentile":337},"2025-12-30",0.78874,{"date":339,"score":71,"percentile":340},"2025-12-31",0.78892,{"date":342,"score":71,"percentile":343},"2026-01-01",0.78989,{"date":345,"score":71,"percentile":346},"2026-01-02",0.78988,{"date":348,"score":71,"percentile":349},"2026-01-03",0.78982,{"date":351,"score":71,"percentile":325},"2026-01-04",{"date":353,"score":71,"percentile":354},"2026-01-05",0.78879,{"date":356,"score":71,"percentile":357},"2026-01-06",0.78885,{"date":359,"score":71,"percentile":360},"2026-01-07",0.78894,{"date":362,"score":71,"percentile":363},"2026-01-08",0.78904,{"date":365,"score":71,"percentile":366},"2026-01-09",0.78906,{"date":368,"score":71,"percentile":369},"2026-01-10",0.78908,{"date":371,"score":71,"percentile":372},"2026-01-11",0.78901,{"date":374,"score":71,"percentile":375},"2026-01-12",0.7889,{"date":377,"score":71,"percentile":322},"2026-01-13",{"date":379,"score":71,"percentile":380},"2026-01-14",0.78907,{"date":382,"score":71,"percentile":383},"2026-01-15",0.78909,{"date":385,"score":71,"percentile":386},"2026-01-16",0.78914,{"date":388,"score":71,"percentile":389},"2026-01-17",0.78922,{"date":391,"score":71,"percentile":392},"2026-01-18",0.78918,{"date":394,"score":71,"percentile":395},"2026-01-19",0.78913,{"date":397,"score":71,"percentile":398},"2026-01-20",0.78912,{"date":400,"score":71,"percentile":392},"2026-01-21",{"date":402,"score":71,"percentile":403},"2026-01-22",0.78927,{"date":405,"score":71,"percentile":406},"2026-01-23",0.78954,{"date":408,"score":71,"percentile":409},"2026-01-24",0.78965,{"date":411,"score":71,"percentile":412},"2026-01-25",0.78958,{"date":414,"score":71,"percentile":406},"2026-01-26",{"date":416,"score":71,"percentile":406},"2026-01-27",{"date":418,"score":71,"percentile":419},"2026-01-28",0.78956,{"date":421,"score":71,"percentile":422},"2026-01-29",0.7895,{"date":424,"score":71,"percentile":425},"2026-01-30",0.78953,{"date":427,"score":71,"percentile":412},"2026-01-31",{"date":429,"score":71,"percentile":430},"2026-02-01",0.79054,[432],{"source":75,"cvss_v2_0":433,"cvss_v3_0":9,"cvss_v3_1":9,"cvss_v4_0":9},{"baseScore":73,"baseSeverity":9,"vectorString":76,"impactScore":73,"exploitabilityScore":73},[435,450,459,485,503,510,515,522,528,533],{"ecosystem":9,"name":436,"vendor":437,"product":438,"cpe_part":439,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":440},"ubuntu linux","canonical","ubuntu_linux","o",[441,444,446,448],{"version":442,"is_range":69,"range_type":443,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"12.04","cpe",{"version":445,"is_range":69,"range_type":443,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"14.04",{"version":447,"is_range":69,"range_type":443,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"14.10",{"version":449,"is_range":69,"range_type":443,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"15.04",{"ecosystem":9,"name":451,"vendor":452,"product":453,"cpe_part":439,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":454},"debian linux","debian","debian_linux",[455,457],{"version":456,"is_range":69,"range_type":443,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"7.0",{"version":458,"is_range":69,"range_type":443,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"8.0",{"ecosystem":9,"name":460,"vendor":461,"product":460,"cpe_part":462,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":463},"firefox","mozilla","a",[464,469,471,473,475,477,479,481,483],{"version":465,"is_range":466,"range_type":443,"version_start":9,"version_start_type":9,"version_end":467,"version_end_type":468,"fixed_in":9},"lte38.1.0",true,"38.1.0","including",{"version":470,"is_range":69,"range_type":443,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"31.0",{"version":472,"is_range":69,"range_type":443,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"31.1.0",{"version":474,"is_range":69,"range_type":443,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"31.1.1",{"version":476,"is_range":69,"range_type":443,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"31.3.0",{"version":478,"is_range":69,"range_type":443,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"31.5.1",{"version":480,"is_range":69,"range_type":443,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"31.5.2",{"version":482,"is_range":69,"range_type":443,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"31.5.3",{"version":484,"is_range":69,"range_type":443,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"38.0",{"ecosystem":9,"name":486,"vendor":461,"product":487,"cpe_part":462,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":488},"firefox esr","firefox_esr",[489,491,493,495,497,499,501],{"version":490,"is_range":69,"range_type":443,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"31.1",{"version":492,"is_range":69,"range_type":443,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"31.2",{"version":494,"is_range":69,"range_type":443,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"31.3",{"version":496,"is_range":69,"range_type":443,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"31.4",{"version":498,"is_range":69,"range_type":443,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"31.5",{"version":500,"is_range":69,"range_type":443,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"31.6.0",{"version":502,"is_range":69,"range_type":443,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"31.7.0",{"ecosystem":9,"name":504,"vendor":461,"product":505,"cpe_part":462,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":506},"Thunderbird","thunderbird",[507],{"version":508,"is_range":466,"range_type":443,"version_start":9,"version_start_type":9,"version_end":509,"version_end_type":468,"fixed_in":9},"lte38.0.1","38.0.1",{"ecosystem":9,"name":511,"vendor":9,"product":511,"cpe_part":9,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":512},"Solaris",[513],{"version":514,"is_range":69,"range_type":443,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"11.3",{"ecosystem":9,"name":516,"vendor":517,"product":518,"cpe_part":439,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":519},"linux enterprise desktop","suse","linux_enterprise_desktop",[520],{"version":521,"is_range":69,"range_type":443,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"12",{"ecosystem":9,"name":523,"vendor":517,"product":524,"cpe_part":439,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":525},"linux enterprise server","linux_enterprise_server",[526],{"version":527,"is_range":69,"range_type":443,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"11:sp4",{"ecosystem":9,"name":529,"vendor":517,"product":530,"cpe_part":439,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":531},"linux enterprise software development kit","linux_enterprise_software_development_kit",[532],{"version":521,"is_range":69,"range_type":443,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"ecosystem":9,"name":534,"vendor":517,"product":535,"cpe_part":439,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":536},"suse linux enterprise server","suse_linux_enterprise_server",[537],{"version":521,"is_range":69,"range_type":443,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9}]