Medium severity5.3NVD Advisory· Published Apr 26, 2019· Updated Jun 17, 2026
CVE-2019-9797
CVE-2019-9797
Description
Cross-origin images can be read in violation of the same-origin policy by exporting an image after using createImageBitmap to read the image and then rendering the resulting bitmap image within a canvas element. This vulnerability affects Firefox < 66.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
10- osv-coords7 versionspkg:rpm/suse/MozillaThunderbird&distro=SUSE%20Linux%20Enterprise%20Workstation%20Extension%2015%20SP1pkg:rpm/opensuse/firefox-esr&distro=openSUSE%20Tumbleweedpkg:rpm/opensuse/MozillaFirefox&distro=openSUSE%20Leap%2015.0pkg:rpm/suse/MozillaThunderbird&distro=SUSE%20Package%20Hub%2012pkg:rpm/suse/MozillaThunderbird&distro=SUSE%20Linux%20Enterprise%20Workstation%20Extension%2015pkg:rpm/opensuse/MozillaFirefox&distro=openSUSE%20Tumbleweedpkg:rpm/opensuse/MozillaThunderbird&distro=openSUSE%20Tumbleweed
< 60.7.0-3.33.2+ 6 more
- (no CPE)range: < 60.7.0-3.33.2
- (no CPE)range: < 128.5.1-1.1
- (no CPE)range: < 60.7.0-lp150.3.54.5
- (no CPE)range: < 60.7.2-85.1
- (no CPE)range: < 60.7.0-3.33.2
- (no CPE)range: < 92.0-1.2
- (no CPE)range: < 91.1.1-1.1
unspecified+ 2 more
- (no CPE)range: unspecified
- (no CPE)range: <66
- cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*range: <66.0
Patches
Vulnerability mechanics
References
19- bugzilla.mozilla.org/show_bug.cginvdIssue TrackingPermissions RequiredVendor Advisory
- www.mozilla.org/security/advisories/mfsa2019-07/nvdVendor Advisory
- lists.opensuse.org/opensuse-security-announce/2019-06/msg00002.htmlnvd
- lists.opensuse.org/opensuse-security-announce/2019-06/msg00029.htmlnvd
- lists.opensuse.org/opensuse-security-announce/2019-06/msg00084.htmlnvd
- access.redhat.com/errata/RHSA-2019:1265nvd
- access.redhat.com/errata/RHSA-2019:1267nvd
- access.redhat.com/errata/RHSA-2019:1269nvd
- access.redhat.com/errata/RHSA-2019:1308nvd
- access.redhat.com/errata/RHSA-2019:1309nvd
- access.redhat.com/errata/RHSA-2019:1310nvd
- lists.debian.org/debian-lts-announce/2019/05/msg00032.htmlnvd
- lists.debian.org/debian-lts-announce/2019/05/msg00038.htmlnvd
- seclists.org/bugtraq/2019/May/56nvd
- seclists.org/bugtraq/2019/May/59nvd
- seclists.org/bugtraq/2019/May/67nvd
- usn.ubuntu.com/3997-1/nvd
- www.debian.org/security/2019/dsa-4448nvd
- www.debian.org/security/2019/dsa-4451nvd
News mentions
0No linked articles in our index yet.