AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2014-1557

HIGH · CVSS 9.3 EPSS 4.94%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2014-07-23 · Last synced 2026-08-04

CyberRota Analysis

This is a high severity vulnerability with a CVSS score of 9.3. It affects Firefox. It may be remotely exploitable.

CVE
CVE-2014-1557
Severity
HIGH
CVSS
9.3
EPSS
4.94%
Firefox

Original NVD Description

The ConvolveHorizontally function in Skia, as used in Mozilla Firefox before 31.0, Firefox ESR 24.x before 24.7, and Thunderbird before 24.7, does not properly handle the discarding of image data during function execution, which allows remote attackers to execute arbitrary code by triggering prolonged image scaling, as demonstrated by scaling of a high-quality image.