CVE-2022-34470: Use After Free

Reference Links

• https://bugzilla.mozilla.org/show_bug.cgi?id=1765951
• https://www.mozilla.org/en-US/security/advisories/mfsa2022-25/
• https://www.mozilla.org/en-US/security/advisories/mfsa2022-24/
• https://www.mozilla.org/en-US/security/advisories/mfsa2022-26/
• https://www.mozilla.org/security/advisories/mfsa2022-24/
• https://www.mozilla.org/security/advisories/mfsa2022-25/
• https://www.mozilla.org/security/advisories/mfsa2022-26/

Parent vulnerabilities

(Appears in the following advisories)

• MFSA2022-25
• MFSA2022-26
• MFSA2022-24

Peer vulnerabilities

(Found alongside the following vulnerabilities)

• CVE-2022-34479
• CVE-2022-34470
• CVE-2022-34468
• CVE-2022-34481
• CVE-2022-31744
• CVE-2022-34472
• CVE-2022-34478
• CVE-2022-2200
• CVE-2022-34484
• CVE-2022-2226
• CVE-2022-34482
• CVE-2022-34483
• CVE-2022-34476
• CVE-2022-34474
• CVE-2022-34469
• CVE-2022-34471
• CVE-2022-34480
• CVE-2022-34477
• CVE-2022-34475
• CVE-2022-34473
• CVE-2022-34485

Frequently Asked Questions

• What is the severity of CVE-2022-34470?

  CVE-2022-34470 is considered a high-severity vulnerability due to the potential for exploitation leading to a crash.

• How do I fix CVE-2022-34470?

  To fix CVE-2022-34470, upgrade to Firefox version 102 or higher, or Firefox ESR version 91.11 or higher.

• What products are affected by CVE-2022-34470?

  CVE-2022-34470 affects Firefox versions below 102, Firefox ESR versions below 91.11, Thunderbird versions below 102, and Thunderbird ESR versions below 91.11.

• Can CVE-2022-34470 lead to data loss?

  While CVE-2022-34470 may cause crashes, it does not specifically indicate a risk of data loss.

• Has CVE-2022-34470 been publicly disclosed?

  Yes, CVE-2022-34470 has been publicly disclosed and documented in Mozilla's security advisories.