CVEvulnerability

CVE-2023-4050

7.5 HIGH Published 2023-08-01 Modified 2026-10-23 Official page ↗
Status
Modified
Published
2023-08-01
Last modified
2026-10-23
Assigner
[email protected]
CVSS 3.1 ([email protected])
7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weaknesses
CWE-787

Description

In some cases, an untrusted input stream was copied to a stack buffer without checking its size. This resulted in a potentially exploitable crash which could have led to a sandbox escape. This vulnerability affects Firefox < 116, Firefox ESR < 102.14, and Firefox ESR < 115.1.

Affected configurations

• mozilla firefox (< 116.0) • mozilla firefox (>= 102.0 < 102.14) • mozilla firefox (>= 115.0 < 115.1) • debian debian linux 11.0 • debian debian linux 12.0

Related

Weakness · CWE (1)

  • CWE-787 Out-of-bounds Write weakness

References