Staging Environment: Content and features may be unstable or change without notice.
Search for vulnerabilities
Vulnerability details: VCID-2xup-1er1-xuh1
Vulnerability ID VCID-2xup-1er1-xuh1
Aliases CVE-2015-4503
Summary Security researcher David Chan reported that Mozilla's mozTCPSocket implementation could leak data past the end of an array, allowing for the potential exposure of memory or private data to malicious servers. This feature is used by Firefox OS and is disabled by default in Firefox on other operating systems.
Status Published
Exploitability None
Weighted Severity None
Risk None
Affected and Fixed Packages Package Details
Weaknesses (1)
No exploits are available.
Exploit Prediction Scoring System (EPSS)
Percentile 0.68681
EPSS Score 0.00575
Published At April 1, 2026, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2026-04-01T13:18:33.267524+00:00 Mozilla Importer Import https://github.com/mozilla/foundation-security-advisories/blob/master/announce/2015/mfsa2015-97.md 38.0.0