“ are actually a critical attack vector that can be reliably exploited by hackers to launch privilege-escalation attacks in the Linux kernel,” according to 2017 research published by the Georgia Institute of Technology.

But cybersecurity researchers have described these types of uninitialized-use bugs as “largely overlooked” and often “regarded as insignificant memory errors.” It is also unclear from Google’s bulletin the exact nature of the flaw. It calls it an “uninitialized-use” bug impacting Chrome’s V8 JavaScript engine. Google describes the same flaw differently. In the Mozilla security advisory, CVE-2020-16042 is described as a flaw in the JavaScript component called BigInt that “could have caused uninitialized memory to be exposed.”īigInt is a JavaScript component used to represent “arbitrarily large integers” in the context of a JavaScript process within the browser, according to a Mozilla description. Mystery Bug Also Impacts Google Chrome Web Browser

Firefox update 2018 problems