CVE Catalog
CVE-2023-4046
MediumCVSS 5.3Exploitation Probability (EPSS)
Elevated risk1.02%
59th percentile - higher than 59% of all known CVEs
Summary
In some circumstances, a stale value could have been used for a global variable in WASM JIT analysis. This resulted in incorrect compilation and a potentially exploitable crash in the content process.
Risk Assessment
This vulnerability may lead to browser crashes, posing risks to users and applications running in Firefox.
Recommendation
It is recommended to update Firefox to version 116 or newer and Firefox ESR to version 102.14 or 115.1.
Original NVD description (English source)
In some circumstances, a stale value could have been used for a global variable in WASM JIT analysis. This resulted in incorrect compilation and a potentially exploitable crash in the content process. This vulnerability affects Firefox < 116, Firefox ESR < 102.14, and Firefox ESR < 115.1.