Multiple Race Conditions in Firefox and Focus Products by Mozilla
CVE-2023-29537
7.5HIGH
Key Information:
- Vendor
Mozilla
- Vendor
- CVE Published:
- 2 June 2023
What is CVE-2023-29537?
This vulnerability arises from multiple race conditions during font initialization processes in Mozilla's Firefox and Focus applications. Attackers may exploit these race conditions to corrupt memory, potentially allowing the execution of arbitrary code under the control of the attacker. The affected versions include Firefox for Android and Focus for Android, which are vulnerable to these exploitation methods if not updated.
Affected Version(s)
Firefox < 112
Firefox for Android < 112
Focus for Android < 112