CVE-2023-29550High· 8.8▾ TwilightMemory safety bugs present in Firefox 111 and Firefox ESR 102.9. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerabi…
▾ Twilight zone — High severity, or a signal on a lesser flaw
impact 48.4 · likelihood 0.1 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Exploit-prediction probability, daily snapshots since Aug 19.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
Last analysed / modified upstream
0.7%
Memory safety bugs present in Firefox 111 and Firefox ESR 102.9. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 112, Focus for Android < 112, Firefox ESR < 102.10, Firefox for Android < 112, and Thunderbird < 102.10.
firefox < 112.0firefox_esr < 102.10firefox_mobile < 112.0focus < 112.0thunderbird < 102.10Upgrade past the affected range:
firefox 112.0firefox_esr 102.10firefox_mobile 112.0focus 112.0thunderbird 102.10Connected by shared product, vendor, weakness, or advisory.
CVE-2023-29548Medium· 6.5A wrong lowering instruction in the ARM64 Ion compiler resulted in a wrong optimization result
CVE-2023-29541High· 8.8Firefox did not properly handle downloads of files ending in <code>.desktop</code>, which can be interpreted to run attacker-controlled commands
CVE-2023-29539High· 8.8When handling the filename directive in the Content-Disposition header, the filename would be truncated if the filename contained a NULL character
CVE-2023-29536High· 8.8An attacker could cause the memory manager to incorrectly free a pointer that addresses attacker-controlled memory, resulting in an assertion, memory corruption, or a potentially exploitable crash
CVE-2023-29535Medium· 6.5Following a Garbage Collector compaction, weak maps may have been accessed before they were correctly traced
CVE-2023-29533Medium· 4.3A website could have obscured the fullscreen notification by using a combination of <code>window.open</code>, fullscreen requests, <code>window.name</code> assignments, and <code>setInterval</code> calls