CVE-2022-45407

CVSS v3.1 7.5 (High)

EPSS 0.08 % (37^th)

Affected Products 1

Advisories 3

If an attacker loaded a font using <code>FontFace()</code> on a background worker, a use-after-free could have occurred, leading to a potentially exploitable crash. This vulnerability affects Firefox < 107.

Weaknesses

CWE-416: Use After Free

CVE Status: PUBLISHED
CNA: Mozilla Corporation
Published Date: 2022-12-22 20:15:42
(21 months ago)
Updated Date: 2023-01-04 16:53:23
(20 months ago)

Affected Products

Mozilla

Firefox

Configuration #1

		CPE23	From	Up To
	Mozilla Firefox prior 107.0 version	cpe:2.3:a:mozilla:firefox		< 107.0