CVE-2014-8637

MEDIUM · CVSS 5 EPSS 2.17%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2015-01-14 · Last synced 2026-08-04

Field Assessment

AI analysis pending.

CVE

CVE-2014-8637

Severity

MEDIUM

CVSS

EPSS

2.17%

Firefox

Original Filing — NVD Description

Mozilla Firefox before 35.0 and SeaMonkey before 2.32 do not properly initialize memory for BMP images, which allows remote attackers to obtain sensitive information from process memory via a crafted web page that triggers the rendering of malformed BMP data within a CANVAS element.