Security update for mozjs115
This security update for mozjs115 addresses three vulnerabilities: a NULL pointer dereference when processing empty external parameter entities, a denial of service caused by an infinite loop in DTD content parsing, and a NULL pointer dereference in 'setContext' after an out-of-memory condition. These issues could lead to application crashes or denial of service conditions. The update fixes these issues to improve stability and security.
AI Analysis
Technical Summary
The update for mozjs115 fixes three vulnerabilities identified as CVE-2026-32776, CVE-2026-32777, and CVE-2026-32778. CVE-2026-32776 is a NULL pointer dereference triggered by processing empty external parameter entities inside an entity declaration value. CVE-2026-32777 is a denial of service vulnerability caused by an infinite loop during DTD content parsing. CVE-2026-32778 is another NULL pointer dereference occurring in the 'setContext' function on retry after an out-of-memory condition. These flaws could cause crashes or denial of service in affected applications using mozjs115.
Potential Impact
Successful exploitation of these vulnerabilities could cause application crashes or denial of service conditions, potentially impacting availability. There is no indication of code execution or data disclosure. No known exploits in the wild have been reported.
Mitigation Recommendations
A security update for mozjs115 has been released that fixes these vulnerabilities. Applying this update is the recommended remediation. No additional mitigation steps are indicated.
Security update for mozjs115
Description
This security update for mozjs115 addresses three vulnerabilities: a NULL pointer dereference when processing empty external parameter entities, a denial of service caused by an infinite loop in DTD content parsing, and a NULL pointer dereference in 'setContext' after an out-of-memory condition. These issues could lead to application crashes or denial of service conditions. The update fixes these issues to improve stability and security.
Affected software
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The update for mozjs115 fixes three vulnerabilities identified as CVE-2026-32776, CVE-2026-32777, and CVE-2026-32778. CVE-2026-32776 is a NULL pointer dereference triggered by processing empty external parameter entities inside an entity declaration value. CVE-2026-32777 is a denial of service vulnerability caused by an infinite loop during DTD content parsing. CVE-2026-32778 is another NULL pointer dereference occurring in the 'setContext' function on retry after an out-of-memory condition. These flaws could cause crashes or denial of service in affected applications using mozjs115.
Potential Impact
Successful exploitation of these vulnerabilities could cause application crashes or denial of service conditions, potentially impacting availability. There is no indication of code execution or data disclosure. No known exploits in the wild have been reported.
Mitigation Recommendations
A security update for mozjs115 has been released that fixes these vulnerabilities. Applying this update is the recommended remediation. No additional mitigation steps are indicated.
Technical Details
- Gcve Source
- db.gcve.eu
- Csaf Category
- csaf_security_advisory
- Csaf Version
- 2.0
- Publisher
- SUSE Product Security Team
- Advisory Id
- openSUSE-SU-2026:20769-1
- Cve Count
- 3
- Additional Cves
- ["CVE-2026-32777","CVE-2026-32778"]
- State
- PUBLISHED
Threat ID: 6aab498455bf5e2cf5990edf
Added to database: 09/17/2026, 01:59:32 UTC
Last enriched: 09/17/2026, 02:24:58 UTC
Last updated: 09/17/2026, 05:01:22 UTC
Views: 2
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.