Firefox · Core
CVE-2026-84125
UAF in Core
Overview
High
Severity
—
CVSS
No
Exploited ITW
Fixed
Fix Status
Files Changed
parser/html/nsHtml5TreeOperation.cpp
Patch
diff --git a/parser/html/nsHtml5TreeOperation.cpp b/parser/html/nsHtml5TreeOperation.cpp
index 0373b025624..ec5bedea211 100644
--- a/parser/html/nsHtml5TreeOperation.cpp
+++ b/parser/html/nsHtml5TreeOperation.cpp
@@ -229,6 +229,8 @@ static void AbortNodeInsertion(nsINode* aNode) {
// Clear form for this element, since it will not actually be
// inserted.
formControl->ClearForm(true, true);
+ } else if (auto* image = HTMLImageElement::FromNode(aNode)) {
+ image->ClearForm(true);
}
}
Loading diff…
References
On This Page