Bugzilla – Bug 970378
VUL-0: CVE-2016-1956: MozillaFirefox: Linux video memory DOS with Intel drivers (MFSA 2016-19)
Last modified: 2019-05-01 17:04:15 UTC
Security researcher Ucha Gobejishvili reported a denial of service (DOS) attack when doing certain WebGL operations in a canvas requiring an unusually large amount buffer to be allocated from video memory. This resulted memory resource exhaustion with some Intel video cards, requiring the computer to be rebooted to return functionality. This was resolved by putting in additional checks on the amount of memory to be allocated during graphics processing.
This issue was limited to a subset of Intel drivers on Linux. Other operating systems were not affected.
bugbot adjusting priority
resolved in the main tracker bug 969894
*** This bug has been marked as a duplicate of bug 969894 ***