Multiple Race Conditions in Firefox and Focus Products by Mozilla
CVE-2023-29537

7.5HIGH

Key Information:

Vendor
Mozilla
Vendor
CVE Published:
2 June 2023

Summary

This vulnerability arises from multiple race conditions during font initialization processes in Mozilla's Firefox and Focus applications. Attackers may exploit these race conditions to corrupt memory, potentially allowing the execution of arbitrary code under the control of the attacker. The affected versions include Firefox for Android and Focus for Android, which are vulnerable to these exploitation methods if not updated.

Affected Version(s)

Firefox < 112

Firefox for Android < 112

Focus for Android < 112

References

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.