CVE-2023-34416
CriticalCVSS 9.8Exploitation Probability (EPSS)
Elevated risk56th percentile - higher than 56% of all known CVEs
Summary
Memory safety bugs exist in Firefox 113, Firefox ESR 102.11, and Thunderbird 102.12. Some of these bugs may lead to memory corruption, potentially allowing arbitrary code execution.
Risk Assessment
Organizations may be at risk of attacks that exploit these vulnerabilities to execute malicious code, potentially leading to data loss or system takeover.
Recommendation
It is recommended to update to the latest versions of Firefox and Thunderbird to mitigate the risks associated with these vulnerabilities.
Original NVD description (English source)
Memory safety bugs present in Firefox 113, Firefox ESR 102.11, and Thunderbird 102.12. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox ESR < 102.12, Firefox < 114, and Thunderbird < 102.12.