CVE-2023-29536: firefox before 112.0 (exclusive); +9 more affected products

Affected technology

firefox · before 112.0 (exclusive)
mozilla

firefox esr · before 102.10 (exclusive)
mozilla

firefox mobile · before 112.0 (exclusive)
mozilla

focus · before 112.0 (exclusive)
mozilla

thunderbird · before 102.10 (exclusive)
mozilla

Firefox · unspecified to before 112
Mozilla

Focus for Android · unspecified to before 112
Mozilla

Firefox ESR · unspecified to before 102.10
Mozilla

Firefox for Android · unspecified to before 112
Mozilla

Thunderbird · unspecified to before 102.10
Mozilla

Component: Not specified by the source

Attack conditions (NVD, CVSS 3.1): Network (remote) · No privileges required · User interaction required

What an attacker can do

An attacker could cause the memory manager to incorrectly free a pointer that addresses attacker-controlled memory, resulting in an assertion, memory corruption, or a potentially exploitable crash. NVD’s CVSS 3.1 assessment (base score 8.8/10) rates confidentiality, integrity and availability impact as high.