CVE-2023-4573
Severity CVSS v4.0:
Pending analysis
Type:
CWE-416
Use After Free
Publication date:
11/09/2023
Last modified:
21/10/2024
Description
When receiving rendering data over IPC `mStream` could have been destroyed when initialized, which could have led to a use-after-free causing a potentially exploitable crash. This vulnerability affects Firefox
Impact
Base Score 3.x
6.50
Severity 3.x
MEDIUM
Vulnerable products and versions
CPE | From | Up to |
---|---|---|
cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:* | 117.0 (excluding) | |
cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:* | 115.0 (including) | 115.2 (excluding) |
cpe:2.3:a:mozilla:firefox_esr:*:*:*:*:*:*:*:* | 102.15 (excluding) | |
cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:* | 115.2 (excluding) |
To consult the complete list of CPE names with products and versions, see this page
References to Advisories, Solutions, and Tools
- https://bugzilla.mozilla.org/show_bug.cgi?id=1846687
- https://www.mozilla.org/security/advisories/mfsa2023-34/
- https://www.mozilla.org/security/advisories/mfsa2023-35/
- https://www.mozilla.org/security/advisories/mfsa2023-36/
- https://www.mozilla.org/security/advisories/mfsa2023-37/
- https://www.mozilla.org/security/advisories/mfsa2023-38/