Multiple Race Conditions in Firefox and Focus Products by Mozilla
CVE-2023-29537
7.5HIGH
Key Information:
- Vendor
- Mozilla
- Vendor
- CVE Published:
- 2 June 2023
Summary
This vulnerability arises from multiple race conditions during font initialization processes in Mozilla's Firefox and Focus applications. Attackers may exploit these race conditions to corrupt memory, potentially allowing the execution of arbitrary code under the control of the attacker. The affected versions include Firefox for Android and Focus for Android, which are vulnerable to these exploitation methods if not updated.
Affected Version(s)
Firefox < 112
Firefox for Android < 112
Focus for Android < 112
References
CVSS V3.1
Score:
7.5
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved