Firefox · Graphics
CVE-2026-100821
Logic Error in Graphics
Overview
Moderate
Severity
—
CVSS
No
Exploited ITW
Fixed
Fix Status
Changed Functions
| Function | Change | Notes |
|---|---|---|
forgfx/layers/ipc/APZCTreeManagerParent.cpp |
modified |
Files Changed
gfx/layers/ipc/APZCTreeManagerParent.cpp
Patch
diff --git a/gfx/layers/ipc/APZCTreeManagerParent.cpp b/gfx/layers/ipc/APZCTreeManagerParent.cpp
index 1a18ed20955..86ae1dd42c9 100644
--- a/gfx/layers/ipc/APZCTreeManagerParent.cpp
+++ b/gfx/layers/ipc/APZCTreeManagerParent.cpp
@@ -68,6 +68,12 @@ mozilla::ipc::IPCResult APZCTreeManagerParent::RecvContentReceivedInputBlock(
mozilla::ipc::IPCResult APZCTreeManagerParent::RecvSetTargetAPZC(
const uint64_t& aInputBlockId, nsTArray<ScrollableLayerGuid>&& aTargets) {
+ for (const auto& guid : aTargets) {
+ if (!IsGuidValid(guid)) {
+ return IPC_FAIL_NO_REASON(this);
+ }
+ }
+
mUpdater->RunOnUpdaterThread(
mLayersId,
NewRunnableMethod<uint64_t,
Loading diff…
References
On This Page