Skip to content
OpenAdvisories
High · 8.8 CVE-2023-25745 EUVD-2023-29652GHSA-f5q8-q9fw-rc2j

Memory safety bugs present in Firefox 109. Some of these bugs showed evidence of memory corruption and we presume that with enough effort s…

Published Jun 2, 2023 · Updated Jan 9, 2025 · Assigned by mozilla

Vendor: Mozilla Product: Firefox Package: firefox Package: mozjs38 Package: mozjs52 Package: mozjs68 Package: mozjs78 Package: mozjs91 Category: Browsers Ecosystem: Ubuntu

Description

Memory safety bugs present in Firefox 109. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 110.

Affected products

VendorProductAffectedFixed
Mozilla Firefox unspecified – < 110 110

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Ubuntu

Security tracker ↗
ReleasePackageFixed inAdvisory
Ubuntu 22.04 LTS mozjs78 +1 No fix yet —
Ubuntu 20.04 LTS firefox 110.0+build3-0ubuntu0.20.04.1 USN-5880-1
Ubuntu 20.04 LTS mozjs52 +1 No fix yet —
Ubuntu 18.04 LTS firefox 110.0+build3-0ubuntu0.18.04.1 USN-5880-1
Ubuntu 18.04 LTS mozjs38 +1 No fix yet —

openSUSE

Security tracker ↗
ReleasePackageFixed inAdvisory
openSUSE Tumbleweed MozillaFirefox 110.0.1-1.1 openSUSE-SU-2024:12753-1
openSUSE Tumbleweed firefox-esr 128.5.1-1.1 openSUSE-SU-2024:14572-1

Advisories 4

References