Use-after-free vulnerability in the js::PreliminaryObjectArray::sweep function in Mozilla Firefox before 48.0 allows remote attackers to execute arbitrary code via crafted JavaScript that is mishandled during incremental garbage collection.
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2016-5255.json"
[ { "events": [ { "introduced": "0" }, { "last_affected": "47.0.1" } ] } ]