CVE-2023-4046
MediumCVSS 5.3Exploitation Probability (EPSS)
Elevated risk59th percentile - higher than 59% of all known CVEs
Summary
In some circumstances, a stale value could have been used for a global variable in WASM JIT analysis. This resulted in incorrect compilation and a potentially exploitable crash in the content process.
Risk Assessment
This vulnerability may lead to browser crashes, posing risks to users and applications running in Firefox.
Recommendation
It is recommended to update Firefox to version 116 or newer and Firefox ESR to version 102.14 or 115.1.
Other vulnerabilities in Firefox < 116, Firefox ESR < 102.14, Firefox ESR < 115.1
See all- CVE-2023-4050High
In some cases, an untrusted input stream was copied to a stack buffer without checking its size. This could lead to a crash that potentially allows for a sandbox escape.
- CVE-2023-4055High
CVE-2023-4055 affects the Firefox browser, where exceeding the number of cookies per domain leads to inconsistencies in the sent cookies. As a result, some requests may be sent with missing cookies.
- CVE-2023-4045Medium
CVE-2023-4045 concerns improper tracking of cross-origin tainting in Offscreen Canvas, which could allow unauthorized access to image data from other sites, violating same-origin policy.
Original NVD description (English source)
In some circumstances, a stale value could have been used for a global variable in WASM JIT analysis. This resulted in incorrect compilation and a potentially exploitable crash in the content process. This vulnerability affects Firefox < 116, Firefox ESR < 102.14, and Firefox ESR < 115.1.