CVE-2023-37456

MediumCVSS 6.5

Published: 12/07/2023(UTC)Updated: 17/06/2026(UTC)Translated: 19/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.40%

32th percentile - higher than 32% of all known CVEs

Summary

The session restore helper crashes whenever there is no parameter sent to the message handler. This vulnerability affects Firefox for iOS versions below 115.

Risk Assessment

Crashes may lead to loss of user session data and decreased trust in the application. Users may experience issues resuming work after a break.

Recommendation

It is recommended to update Firefox for iOS to version 115 or newer to mitigate this vulnerability.

Original NVD description (English source)

The session restore helper crashed whenever there was no parameter sent to the message handler. This vulnerability affects Firefox for iOS < 115.