CVEvulnerability

CVE-2023-25738

6.5 MEDIUM Published 2023-06-02 Modified 2026-10-23 Official page ↗
Status
Modified
Published
2023-06-02
Last modified
2026-10-23
Assigner
[email protected]
CVSS 3.1 ([email protected])
6.5 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
6.5 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Weaknesses
CWE-125

Description

Members of the <code>DEVMODEW</code> struct set by the printer device driver weren't being validated and could have resulted in invalid values which in turn would cause the browser to attempt out of bounds access to related variables.<br>*This bug only affects Firefox on Windows. Other operating systems are unaffected.*. This vulnerability affects Firefox < 110, Thunderbird < 102.8, and Firefox ESR < 102.8.

Affected configurations

• mozilla firefox (< 110.0) • mozilla firefox esr (< 102.8) • mozilla thunderbird (< 102.8)

Related

Weakness · CWE (1)

  • CWE-125 Out-of-bounds Read weakness

References