CVE-2019-9813: mozilla firefox Type Confusion

CVSS: 8.8v3.0HighModified

AliasesUBUNTU-CVE-2019-9813DEBIAN-CVE-2019-9813

Published 26-04-2019Last modified 04-08-2024

Vulnerability summary

CVE-2019-9813 is a high (CVSS 8.8) Type Confusion vulnerability in mozilla firefox. EPSS estimates a 7.39% chance of exploitation in the next 30 days, higher than 94.3% of scored vulnerabilities. 1 public exploit is recorded.

Overall risk

47/100

0100

Medium · default modelHow is this calculated?

CVSS score

8.8/10

010

High · v3.0 (NVD)

EPSS score

7.39%

0%100%

Low · 0.00 pp in 30 days

KEVNot listedIn no KEV catalog

RansomwareNone recordedNo known use recorded

Public exploits1exploit-database

Timeline

26-04-2019
PublishedVulnerability first disclosed.
04-08-2024
Last modifiedVulnerability information updated.

Description

Incorrect handling of __proto__ mutations may lead to type confusion in IonMonkey JIT code and can be leveraged for arbitrary memory read and write. This vulnerability affects Firefox < 66.0.1, Firefox ESR < 60.6.1, and Thunderbird < 60.6.1.

CVSS metrics

4 scores · 3 sources · 2 versions

v3.08.8v2.06.8

EPSS trend

Probability

7.39%

Chance of exploitation in the next 30 days

Percentile

94%

Versus all other CVEs

30-day change

0.00 pp

From 7.39% on 19-09-2026

19-09-202619-10-2026

EPSS score

7.39%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

1 found

exploit-databasedosmultipleVerified
SpiderMonkey - IonMonkey Compiled Code Fails to Update Inferred Property Types (Type Confusion)
Maturity: poc

Weaknesses

CWE · root cause

CWE-843Access of Resource Using Incompatible Type ('Type Confusion')The product allocates or initializes a resource such as a pointer, object, or variable using one type, but it later accesses that resource using a type that is incompatible with the original type.

Affected systems

Ubuntu4 products

firefox< 66.0.1+build1-0ubuntu0.14.04.1 | < 66.0.1+build1-0ubuntu0.16.04.1 | < 66.0.1+build1-0ubuntu0.18.04.1
mozjs38All versions (No fix recorded)
mozjs52All versions (No fix recorded)
thunderbird< 1:60.6.1+build2-0ubuntu0.14.04.1 | < 1:60.6.1+build2-0ubuntu0.16.04.1 | < 1:60.6.1+build2-0ubuntu0.18.04.1

Mozilla3 products

firefox≥ unspecified, < 66.0.1 | < 60.6.1 | < 66.0.1
firefox_esr≥ unspecified, < 60.6.1
thunderbird≥ unspecified, < 60.6.1 | < 60.6.1

Debian1 product

firefox-esr< 60.6.1esr-1

3 vendors · 8 products

References

13 links

www.mozilla.org/security/advisories/mfsa2019-09/X Refsource MISCVendor Advisory
www.mozilla.org/security/advisories/mfsa2019-10/X Refsource MISCVendor Advisory
www.mozilla.org/security/advisories/mfsa2019-12/X Refsource MISCVendor Advisory
bugzilla.mozilla.org/show_bug.cgi?id=1538006X Refsource MISCIssue TrackingPermissions RequiredVendor Advisory
access.redhat.com/errata/RHSA-2019:0966Vendor AdvisoryX Refsource REDHAT
access.redhat.com/errata/RHSA-2019:1144Vendor AdvisoryX Refsource REDHAT
ubuntu.com/security/CVE-2019-9813REPORT
www.mozilla.org/en-US/security/advisories/mfsa2019-09/REPORT
www.mozilla.org/en-US/security/advisories/mfsa2019-12/REPORT
ubuntu.com/security/notices/USN-3919-1Advisory

Show all 13 references

ubuntu.com/security/notices/USN-3927-1Advisory
www.cve.org/CVERecord?id=CVE-2019-9813REPORT
security-tracker.debian.org/tracker/CVE-2019-9813Advisory

Vulnerability summary

Advisory lineage

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References

Related vulnerabilities