Sploitus

CVE-2019-9810

13 known exploits for CVE-2019-9810

Incorrect alias information in IonMonkey JIT compiler for Array.prototype.slice method may lead to missing bounds check and a buffer overflow. This vulnerability affects Firefox < 66.0.1, Firefox ESR < 60.6.1, and Thunderbird < 60.6.1.

Affected products
Alt Linux, Centos, Firefox, Firefox Esr, Red Hat, Suse, Thunderbird, Ubuntu
Mozilla Firefox
< 60.6.1, 66.0.1
Mozilla Thunderbird
< 60.6.1
Fix
Available
CVSS 3.1
8.8 HIGH
EPSS
29.5% (98th percentile)
Weakness
CWE-119
NVD status
Modified
Published
2019-04-26
CVE-2019-9810 at NVD
Authoritative description, scoring and affected products

13 known exploits for CVE-2019-9810

Proof-of-concept code and exploit modules indexed by Sploitus

CVE-2019-11708
2026-08-28 KitPloitKITPLOIT
CVE-2019-9810
2026-08-28 KitPloitKITPLOIT
CVE-2019-9810-PoC
2026-08-28 KitPloitKITPLOIT
Exploit for Improper Input Validation in Mozilla Firefox
2025-07-27 mirrors_0vercl0kGITEE
Exploit for Type Confusion in Mozilla Firefox
2020-04-13 tunnelshadeGITHUB
Mozilla FireFox (Windows 10 x64) - Full Chain Client Side Attack Exploit
2019-12-09 Axel SouchetZDT
Mozilla FireFox (Windows 10 x64) - Full Chain Client Side Attack
2019-12-07 Axel SouchetEXPLOITPACK
Mozilla FireFox (Windows 10 x64) - Full Chain Client Side Attack
2019-12-07 Axel SouchetEXPLOITDB
Exploit for Improper Input Validation in Mozilla Firefox
2019-09-29 0vercl0kGITHUB
Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Mozilla Firefox
2019-05-05 0vercl0kGITHUB
Firefox 66.0.1 - Array.prototype.slice Buffer Overflow Exploit
2019-03-27 xuechiyaobaiZDT
Firefox Array.prototype.slice Buffer Overflow
2019-03-27 XuechiyaobaiPACKETSTORM
Firefox < 66.0.1 - 'Array.prototype.slice' Buffer Overflow
2019-03-26 xuechiyaobaiEXPLOITDB