Firefox · DOM
CVE-2026-2771
Logic Error in DOM
Overview
High
Severity
—
CVSS
No
Exploited ITW
Fixed
Fix Status
Files Changed
dom/base/Document.cpp
Patch
diff --git a/dom/base/Document.cpp b/dom/base/Document.cpp
index 39352a3d48f..39c797affe5 100644
--- a/dom/base/Document.cpp
+++ b/dom/base/Document.cpp
@@ -693,7 +693,10 @@ class SimpleHTMLCollection final : public nsSimpleContentList,
}
virtual uint32_t Length() override { return nsSimpleContentList::Length(); }
virtual Element* GetElementAt(uint32_t aIndex) override {
- return mElements.SafeElementAt(aIndex)->AsElement();
+ if (nsIContent* content = mElements.SafeElementAt(aIndex)) {
+ return content->AsElement();
+ }
+ return nullptr;
}
virtual Element* GetFirstNamedElement(const nsAString& aName,
Loading diff…
References
On This Page