Firefox · DOM
CVE-2026-92076
Logic Error in DOM
Overview
Low
Severity
—
CVSS
No
Exploited ITW
Fixed
Fix Status
Changed Functions
| Function | Change | Notes |
|---|---|---|
ifdom/base/MimeType.cpp |
modified |
Files Changed
dom/base/MimeType.cpp
Patch
diff --git a/dom/base/MimeType.cpp b/dom/base/MimeType.cpp
index 1dba5b852ae..d53130ed587 100644
--- a/dom/base/MimeType.cpp
+++ b/dom/base/MimeType.cpp
@@ -110,8 +110,10 @@ template <typename char_type>
++pos;
}
- // Might as well check for base64 now
- if (*pos != '=') {
+ // Might as well check for base64 now. Note that the loop above may have
+ // stopped because it reached the end of the input, in which case there is
+ // no code point to look at.
+ if (pos == end || *pos != '=') {
// trim leading and trailing spaces
while (namePos < pos && NS_IsHTTPWhitespace(*namePos)) {
++namePos;
Loading diff…
References
On This Page