GCVE Workshop - 22 September 2026 (14:00-18:00), Luxembourg Before The Vulnopticon Conference - Registration
← All credits

Nan Wang

8 vulnerability records and advisories credit this contributor.

CVE-2025-11153
JIT miscompilation in the JavaScript Engine: JIT component
CVE-2026-6747
Use-after-free in the WebRTC component
CVE-2026-6776
Incorrect boundary conditions in the WebRTC: Networking component
CVE-2026-6775
Incorrect boundary conditions in the WebRTC component
CVE-2025-8027
JavaScript engine only wrote partial return value to stack
CVE-2025-1011
A bug in WebAssembly code generation could result in a crash
CVE-2024-7520
A type confusion bug in WebAssembly could be leveraged by an attacker to potentially achieve code execution. This vulnerability affects Firefox < 129, Firefox ESR < 128.1, and Thunderbird < 128.1.
CVE-2024-3856
A use-after-free could occur during WASM execution if garbage collection ran during the creation of an array. This vulnerability affects Firefox < 125.