Memory Safety Issues in Firefox and Focus for Android by Mozilla
CVE-2023-29551

8.8HIGH

Key Information:

Vendor
Mozilla
Status
Firefox for Android
Firefox
Focus for Android
Vendor
CVE Published:
2 June 2023

Summary

The vulnerability in Firefox and Focus for Android stems from specific memory safety flaws that have been identified in versions prior to 112. These flaws indicate potential memory corruption, which, if exploited, may allow an attacker to execute arbitrary code on the affected devices. Users of these browsers are advised to update promptly to mitigate the risks associated with these vulnerabilities.

Affected Version(s)

Firefox < 112

Firefox for Android < 112

Focus for Android < 112

References

https://www.mozilla.org/security/advisories/mfsa2023-13/
https://bugzilla.mozilla.org/buglist.cgi?bug_id=1763625%2...

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.