VDB

CVE-2015-2729

CVE-2015-2729 PUBLISHED

Reported by mozilla · Published July 6, 2015

The AudioParamTimeline::AudioNodeInputValue function in the Web Audio implementation in Mozilla Firefox before 39.0 and Firefox ESR 38.x before 38.1 does not properly calculate an oscillator rendering range, which allows remote attackers to obtain sensitive information from process memory or cause a denial of service (out-of-bounds read) via unspecified vectors.

Fixed versions

Upgrade to a fixed version or later. Language registries are listed first, then Linux distributions, then vendor products.

PackageEcosystemFixed in
thunderbirdmozilla38.0.1
firefoxUbuntu:14.04:LTS39.0+build5-0ubuntu0.14.04.1
firefoxmozilla38.1.0

Affected products

VendorProductVersions
n/an/an/a
n/an/a*

Timeline

  • Jul 2, 2015 CVE Published
  • Feb 4, 2022 EPSS Score (30 in total, the first dated here)
  • Mar 5, 2026 Distribution Patch (4 in total, the first dated here)
  • Mar 5, 2026 Security Advisory (6 in total, the first dated here)
  • Oct 15, 2026 Coalition ESS Score

Query this with the API

The same record, from the CLI:

vulnetix vdb vuln CVE-2015-2729
vulnetix vdb fixes CVE-2015-2729

Or with curl, using the org id and key from your account page:

curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
  "https://api.vdb.vulnetix.com/v2/vuln/CVE-2015-2729/fixes/registry"

The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart

References

Look up in the Resolve Platform →
$ Lookup Community · 50/day Open Lookup ›