CVE-2011-2368: Mozilla Firefox

High severity, CVSS 10.0. EPSS: 4.3% chance of exploitation in the next 30 days.

The WebGL implementation in Mozilla Firefox 4.x through 4.0.1 does not properly restrict write operations, which allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via unspecified vectors.

Affected products

• Mozilla Firefox: version 4.0 only; version 4.0.1 only

Published 2011-06-30. Last modified 2026-06-16.