CVE-2023-29531

CVSS v3.1 9.8 (Critical)

EPSS 0.24 % (62^th)

Affected Products 4

Advisories 10

An attacker could have caused an out of bounds memory access using WebGL APIs, leading to memory corruption and a potentially exploitable crash.

This bug only affects Firefox and Thunderbird for macOS. Other operating systems are unaffected. This vulnerability affects Firefox < 112, Firefox ESR < 102.10, and Thunderbird < 102.10.

Weaknesses

CWE-787: Out-of-bounds Write

CVE Status: PUBLISHED
CNA: Mozilla Corporation
Published Date: 2023-06-19 10:15:09
(15 months ago)
Updated Date: 2023-06-27 08:28:43
(14 months ago)

Affected Products

Apple

Macos

Mozilla

Firefox
Firefox Esr
Thunderbird

Configuration #1

AND

		CPE23	Up To
OR
	Mozilla Firefox prior 112.0 version	cpe:2.3:a:mozilla:firefox	< 112.0
OR
	Running on/with
	Mozilla Firefox Esr prior 102.10 version	cpe:2.3:a:mozilla:firefox_esr	< 102.10
OR
	Running on/with
	Mozilla Thunderbird prior 102.10 version	cpe:2.3:a:mozilla:thunderbird	< 102.10
OR
	Running on/with
	Apple Macos	cpe:2.3:o:apple:macos:-