Threats tagged 'ghsa-gmc2-wjcf-43vw'

libcss versions through 0.9.2 have a NULL pointer dereference vulnerability in the mq_parse_media_query() function. This flaw allows remote attackers to cause a denial of service by supplying media lists that end with a trailing comma, which can crash parsers like NetSurf when processing @media or @import rules in stylesheets.