CVE-2022-38477: High severity thunderbird vulnerability
Mozilla developer Nika Layzell and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 103 and Firefox ESR 102.1. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code.
Other sources
Mozilla developer Nika Layzell and the Mozilla Fuzzing Team reported memory safety bugs present in Thunderbird 102.1. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code.
— Mozilla
Affected Software
Event History
Parent advisories
This vulnerability appears in the following advisories.
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
What is the severity of CVE-2022-38477?
CVE-2022-38477 has been classified as a memory safety bug that may allow for arbitrary code execution in affected versions of Firefox and Firefox ESR.
How do I fix CVE-2022-38477?
To mitigate CVE-2022-38477, upgrade your Firefox browser to version 104 or your Firefox ESR to version 102.2.
Which products are affected by CVE-2022-38477?
CVE-2022-38477 affects Mozilla Firefox versions prior to 104, Firefox ESR versions prior to 102.2, and Thunderbird versions prior to 102.2.
Who reported CVE-2022-38477?
CVE-2022-38477 was reported by Mozilla developer Nika Layzell and the Mozilla Fuzzing Team.
What type of vulnerability is CVE-2022-38477?
CVE-2022-38477 is categorized as a memory safety vulnerability that potentially leads to memory corruption.