PatchGap
Firefox · DOM

CVE-2026-92078

Logic Error in DOM
Low firefox Logic Error 🔧 Commit mapped

Overview

Low
Severity
—
CVSS
No
Exploited ITW
Fixed
Fix Status
Impactlow
DescriptionDenial-of-service in the Security component
ComponentDOM
Bug ClassLogic Error
Tracker2066736
Fix commitc06fc27a7571 (firefox) +4/-0
CISA KEVNot listed
CreditedDominik Bay
Disclosed2026-09-15

Files Changed

  • dom/ipc/FilePickerParent.cpp

Patch

view commit
diff --git a/dom/ipc/FilePickerParent.cpp b/dom/ipc/FilePickerParent.cpp
index 79e248ff3d9..a896c358915 100644
--- a/dom/ipc/FilePickerParent.cpp
+++ b/dom/ipc/FilePickerParent.cpp
@@ -280,6 +280,10 @@ mozilla::ipc::IPCResult FilePickerParent::RecvOpen(
     return IPC_OK();
   }
 
+  if (aFilters.Length() != aFilterNames.Length()) {
+    return IPC_FAIL(this, "PFilePicker::Open filter arrays lengths mismatch");
+  }
+
   mFilePicker->SetAddToRecentDocs(aAddToRecentDocs);
 
   for (uint32_t i = 0; i < aFilters.Length(); ++i) {
Loading diff…
On This Page