CVE-2022-22738: High severity thunderbird vulnerability
Applying a CSS filter effect could have accessed out of bounds memory. This could have lead to a heap-buffer-overflow causing a potentially exploitable crash.
Affected Software
Event History
Parent advisories
This vulnerability appears in the following advisories.
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
What is CVE-2022-22738?
CVE-2022-22738 is a vulnerability that allows an attacker to access out of bounds memory by applying a CSS filter effect, potentially leading to a heap-buffer-overflow and a potentially exploitable crash.
Which software is affected by CVE-2022-22738?
CVE-2022-22738 affects Mozilla Firefox ESR versions earlier than 91.5, Mozilla Firefox versions earlier than 96, and Mozilla Thunderbird versions earlier than 91.5.
What is the severity of CVE-2022-22738?
CVE-2022-22738 has a severity rating of 8.8 (High).
How can I fix CVE-2022-22738?
To fix CVE-2022-22738, update your Mozilla Firefox ESR to version 91.5 or later, update your Mozilla Firefox to version 96 or later, or update your Mozilla Thunderbird to version 91.5 or later.
Where can I find more information about CVE-2022-22738?
You can find more information about CVE-2022-22738 on the Mozilla Bugzilla page and the Mozilla security advisories: mfsa2022-03 and mfsa2022-01.