CVE-2022-22737: Race Condition
Constructing audio sinks could have lead to a race condition when playing audio files and closing windows. This could have lead to a use-after-free causing a potentially exploitable crash.
Affected Software
Event History
Parent advisories
This vulnerability appears in the following advisories.
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
What is the severity of CVE-2022-22737?
CVE-2022-22737 is classified as potentially exploitable due to a race condition that can lead to a use-after-free situation.
How do I fix CVE-2022-22737?
To fix CVE-2022-22737, upgrade to Mozilla Firefox ESR version 91.5, Firefox version 96, or Thunderbird version 91.5.
What products are affected by CVE-2022-22737?
CVE-2022-22737 affects Mozilla Firefox ESR versions prior to 91.5, Firefox versions prior to 96, and Thunderbird versions prior to 91.5.
What type of vulnerability is CVE-2022-22737?
CVE-2022-22737 is a use-after-free vulnerability triggered by race conditions when handling audio sinks.
Can CVE-2022-22737 cause crashes?
Yes, CVE-2022-22737 can lead to crashes due to the use-after-free condition that may be triggered during audio playback.