First published: Tue Mar 08 2022(Updated: )
Mozilla developers Kershaw Chang, Ryan VanderMeulen, and Randell Jesup reported memory safety bugs present in Firefox 97. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code.
Credit: security@mozilla.org
Affected Software | Affected Version | How to fix |
---|---|---|
Firefox | <98 | 98 |
Firefox | <97.0 | |
<97.0 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
(Found alongside the following vulnerabilities)
CVE-2022-0843 is classified as a medium severity vulnerability due to potential memory corruption that could be exploited.
To fix CVE-2022-0843, update Mozilla Firefox to version 98 or later.
CVE-2022-0843 affects Mozilla Firefox versions prior to 98.
Exploiting CVE-2022-0843 could allow an attacker to run arbitrary code on the affected system.
CVE-2022-0843 was reported by Mozilla developers Kershaw Chang, Ryan VanderMeulen, and Randell Jesup.