Medium severity4.3NVD Advisory· Published Apr 26, 2019· Updated Jun 17, 2026
CVE-2018-18511
CVE-2018-18511
Description
Cross-origin images can be read from a canvas element in violation of the same-origin policy using the transferFromImageBitmap method. *Note: This only affects Firefox 65. Previous versions are unaffected.*. This vulnerability affects Firefox < 65.0.1.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
10unspecified+ 2 more
- (no CPE)range: unspecified
- (no CPE)range: <65.0.1
- cpe:2.3:a:mozilla:firefox:65.0:*:*:*:*:*:*:*
- osv-coords7 versionspkg:rpm/opensuse/MozillaFirefox&distro=openSUSE%20Tumbleweedpkg:rpm/suse/MozillaThunderbird&distro=SUSE%20Package%20Hub%2012pkg:rpm/opensuse/firefox-esr&distro=openSUSE%20Tumbleweedpkg:rpm/opensuse/MozillaThunderbird&distro=openSUSE%20Tumbleweedpkg:rpm/suse/MozillaThunderbird&distro=SUSE%20Linux%20Enterprise%20Workstation%20Extension%2015pkg:rpm/suse/MozillaThunderbird&distro=SUSE%20Linux%20Enterprise%20Workstation%20Extension%2015%20SP1pkg:rpm/opensuse/MozillaFirefox&distro=openSUSE%20Leap%2015.0
< 92.0-1.2+ 6 more
- (no CPE)range: < 92.0-1.2
- (no CPE)range: < 60.7.2-85.1
- (no CPE)range: < 128.5.1-1.1
- (no CPE)range: < 91.1.1-1.1
- (no CPE)range: < 60.7.0-3.33.2
- (no CPE)range: < 60.7.0-3.33.2
- (no CPE)range: < 60.7.0-lp150.3.54.5
Patches
Vulnerability mechanics
References
19- bugzilla.mozilla.org/show_bug.cginvdIssue TrackingPermissions RequiredVendor Advisory
- www.mozilla.org/security/advisories/mfsa2019-04/nvdVendor Advisory
- lists.opensuse.org/opensuse-security-announce/2019-06/msg00002.htmlnvd
- lists.opensuse.org/opensuse-security-announce/2019-06/msg00029.htmlnvd
- lists.opensuse.org/opensuse-security-announce/2019-06/msg00084.htmlnvd
- access.redhat.com/errata/RHSA-2019:1265nvd
- access.redhat.com/errata/RHSA-2019:1267nvd
- access.redhat.com/errata/RHSA-2019:1269nvd
- access.redhat.com/errata/RHSA-2019:1308nvd
- access.redhat.com/errata/RHSA-2019:1309nvd
- access.redhat.com/errata/RHSA-2019:1310nvd
- lists.debian.org/debian-lts-announce/2019/05/msg00032.htmlnvd
- lists.debian.org/debian-lts-announce/2019/05/msg00038.htmlnvd
- seclists.org/bugtraq/2019/May/56nvd
- seclists.org/bugtraq/2019/May/59nvd
- seclists.org/bugtraq/2019/May/67nvd
- usn.ubuntu.com/3997-1/nvd
- www.debian.org/security/2019/dsa-4448nvd
- www.debian.org/security/2019/dsa-4451nvd
News mentions
0No linked articles in our index yet.