CVE-2022-22752: High severity Mozilla Firefox vulnerability
Mozilla developers Christian Holler and Jason Kratzer reported memory safety bugs present in Firefox 95. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Firefoxto a version that resolves this vulnerability.Fixed in 96 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 96 - Upgrade
Upgrade
alpine/firefoxto a version that resolves this vulnerability.Fixed in 97.0-r0 - Upgrade
Upgrade
alpine/librewolfto a version that resolves this vulnerability.Fixed in 97.0-r0
Event History
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
What is the severity of CVE-2022-22752?
CVE-2022-22752 has been classified as high severity due to potential memory corruption vulnerabilities.
How do I fix CVE-2022-22752?
To fix CVE-2022-22752, update Mozilla Firefox to version 96 or later.
What versions of Firefox are affected by CVE-2022-22752?
CVE-2022-22752 affects versions of Mozilla Firefox prior to version 96.
Can CVE-2022-22752 be exploited?
Yes, CVE-2022-22752 may be exploitable to run arbitrary code under certain conditions.
Who reported CVE-2022-22752?
CVE-2022-22752 was reported by Mozilla developers Christian Holler and Jason Kratzer.