CVE-2023-4050
HighCVSS 7.5Exploitation Probability (EPSS)
Very high risk96th percentile - higher than 96% of all known CVEs
Summary
In some cases, an untrusted input stream was copied to a stack buffer without checking its size. This could lead to a crash that potentially allows for a sandbox escape.
Risk Assessment
This vulnerability could lead to serious security threats, including unauthorized access to the system.
Recommendation
It is recommended to update Firefox to version 116 or later and Firefox ESR to version 102.14 or 115.1.
Other vulnerabilities in Firefox < 116, Firefox ESR < 102.14, Firefox ESR < 115.1
See all- CVE-2023-4055High
CVE-2023-4055 affects the Firefox browser, where exceeding the number of cookies per domain leads to inconsistencies in the sent cookies. As a result, some requests may be sent with missing cookies.
- CVE-2023-4046Medium
In some circumstances, a stale value could have been used for a global variable in WASM JIT analysis. This resulted in incorrect compilation and a potentially exploitable crash in the content process.
- CVE-2023-4045Medium
CVE-2023-4045 concerns improper tracking of cross-origin tainting in Offscreen Canvas, which could allow unauthorized access to image data from other sites, violating same-origin policy.
Original NVD description (English source)
In some cases, an untrusted input stream was copied to a stack buffer without checking its size. This resulted in a potentially exploitable crash which could have led to a sandbox escape. This vulnerability affects Firefox < 116, Firefox ESR < 102.14, and Firefox ESR < 115.1.