CVE-2023-4050

HighCVSS 7.5

Published: 01/08/2023(UTC)Updated: 17/06/2026(UTC)Translated: 18/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Very high risk

13.80%

96th percentile - higher than 96% of all known CVEs

Summary

In some cases, an untrusted input stream was copied to a stack buffer without checking its size. This could lead to a crash that potentially allows for a sandbox escape.

Risk Assessment

This vulnerability could lead to serious security threats, including unauthorized access to the system.

Recommendation

It is recommended to update Firefox to version 116 or later and Firefox ESR to version 102.14 or 115.1.

Original NVD description (English source)

In some cases, an untrusted input stream was copied to a stack buffer without checking its size. This resulted in a potentially exploitable crash which could have led to a sandbox escape. This vulnerability affects Firefox < 116, Firefox ESR < 102.14, and Firefox ESR < 115.1.