CVE-2023-4057
CriticalCVSS 9.8Exploitation Probability (EPSS)
Low risk50th percentile - higher than 50% of all known CVEs
Summary
Memory safety bugs exist in Firefox 115, Firefox ESR 115.0, and Thunderbird 115.0. Some of these bugs may lead to memory corruption, potentially allowing arbitrary code execution.
Risk Assessment
Organizations may be at risk of attacks exploiting these bugs to gain control over user systems. Users on versions below 116 Firefox and below 115.1 in Firefox ESR and Thunderbird are particularly vulnerable.
Recommendation
It is recommended to update Firefox and Thunderbird to the latest versions to mitigate the risks associated with this vulnerability.
Original NVD description (English source)
Memory safety bugs present in Firefox 115, Firefox ESR 115.0, and Thunderbird 115.0. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 116, Firefox ESR < 115.1, and Thunderbird < 115.1.