CVE-2019-9802

CVE-2019-9802 describes a memory reading vulnerability in Firefox versions prior to 66. An attacker could compromise a sandbox content process, initiate an FTP download, and then manipulate a child process to render downloaded data with an arbitrary file length. This bypasses sandbox protections, allowing for a potential memory read of adjacent sensitive data from the privileged Chrome process. The vulnerability has a CVSS score of 7.5 (HIGH), indicating a network-based attack with low complexity and high confidentiality impact. There is no known active exploitation, public exploit code, or significant community discussion surrounding this CVE.