CVE-2014-1543: Mozilla Firefox

High severity, CVSS 7.5. EPSS: 3.8% chance of exploitation in the next 30 days.

Multiple heap-based buffer overflows in the navigator.getGamepads function in the Gamepad API in Mozilla Firefox before 30.0 allow remote attackers to execute arbitrary code by using non-contiguous axes with a (1) physical or (2) virtual Gamepad device.

Affected products

• Mozilla Firefox: up to and including 29.0.1

Published 2014-06-11. Last modified 2026-06-17.