CVE-2022-31745: Out-of-bounds Read
If array shift operations are not used, the Garbage Collector may have become confused about valid objects.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Firefoxto a version that resolves this vulnerability.Fixed in 101 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 101 - Upgrade
Upgrade
alpine/firefoxto a version that resolves this vulnerability.Fixed in 101.0-r0 - Upgrade
Upgrade
alpine/librewolfto a version that resolves this vulnerability.Fixed in 101.0-r0
Event History
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
What is the severity of CVE-2022-31745?
CVE-2022-31745 is considered a critical vulnerability affecting Firefox versions prior to 101.
How do I fix CVE-2022-31745?
To fix CVE-2022-31745, update your Firefox browser to version 101 or later.
What vulnerabilities does CVE-2022-31745 address?
CVE-2022-31745 addresses issues related to Garbage Collector confusion concerning valid objects due to improper array shift operations.
Which versions of Firefox are affected by CVE-2022-31745?
CVE-2022-31745 affects all Firefox versions below 101.
Is there a workaround for CVE-2022-31745?
There are no known workarounds for CVE-2022-31745; upgrading to the latest version is the only solution.