CVE-2022-3266

Reference Links

• https://bugzilla.mozilla.org/show_bug.cgi?id=1767360
• https://www.mozilla.org/en-US/security/advisories/mfsa2022-42/
• https://www.mozilla.org/en-US/security/advisories/mfsa2022-40/
• https://www.mozilla.org/en-US/security/advisories/mfsa2022-41/
• https://www.mozilla.org/security/advisories/mfsa2022-40/
• https://www.mozilla.org/security/advisories/mfsa2022-41/
• https://www.mozilla.org/security/advisories/mfsa2022-42/

Parent vulnerabilities

(Appears in the following advisories)

• MFSA2022-42
• MFSA2022-41
• MFSA2022-40

Peer vulnerabilities

(Found alongside the following vulnerabilities)

• CVE-2022-3266
• CVE-2022-40959
• CVE-2022-40960
• CVE-2022-40958
• CVE-2022-40956
• CVE-2022-40957
• CVE-2022-3155
• CVE-2022-40962
• CVE-2022-46880
• CVE-2022-40961

Frequently Asked Questions

• What is the vulnerability ID for this issue?

  The vulnerability ID is CVE-2022-3266.

• What is the severity of CVE-2022-3266?

  The severity of CVE-2022-3266 is high with a severity value of 7.

• Which software is affected by CVE-2022-3266?

  CVE-2022-3266 affects Mozilla Thunderbird up to version 102.3, Mozilla Firefox up to version 105, and Mozilla Firefox ESR up to version 102.3.

• What is the impact of CVE-2022-3266?

  CVE-2022-3266 can result in a potentially exploitable crash due to an out-of-bounds read when decoding H264 video.

• How can I fix CVE-2022-3266?

  To fix CVE-2022-3266, update Mozilla Thunderbird to version 102.3 or later, Mozilla Firefox to version 105 or later, or Mozilla Firefox ESR to version 102.3 or later.