CVE-2018-18503: Canonical Ubuntu Linux

High severity, CVSS 8.8. EPSS: 1.4% chance of exploitation in the next 30 days.

When JavaScript is used to create and manipulate an audio buffer, a potentially exploitable crash may occur because of a compartment mismatch in some situations. This vulnerability affects Firefox < 65.

Affected products

• Canonical Ubuntu Linux: version 14.04 only; version 16.04 only; version 18.04 only; version 18.10 only
• Mozilla Firefox: before 65.0 (fixed in 65.0)

Published 2019-02-05. Last modified 2026-06-17.