CVE-2022-40957

Reference Links

• https://bugzilla.mozilla.org/show_bug.cgi?id=1777604
• https://www.mozilla.org/en-US/security/advisories/mfsa2022-42/
• https://www.mozilla.org/en-US/security/advisories/mfsa2022-40/
• https://www.mozilla.org/en-US/security/advisories/mfsa2022-41/
• https://www.mozilla.org/security/advisories/mfsa2022-40/
• https://www.mozilla.org/security/advisories/mfsa2022-41/
• https://www.mozilla.org/security/advisories/mfsa2022-42/

Parent vulnerabilities

(Appears in the following advisories)

• MFSA2022-42
• MFSA2022-41
• MFSA2022-40

Peer vulnerabilities

(Found alongside the following vulnerabilities)

• CVE-2022-3266
• CVE-2022-40959
• CVE-2022-40960
• CVE-2022-40958
• CVE-2022-40956
• CVE-2022-40957
• CVE-2022-3155
• CVE-2022-40962
• CVE-2022-46880
• CVE-2022-40961

Frequently Asked Questions

• What is CVE-2022-40957?

  CVE-2022-40957 is a vulnerability that affects Firefox ESR < 102.3, Thunderbird < 102.3, and Firefox < 105, which can lead to a potentially exploitable crash due to inconsistent data in instruction and data cache when creating wasm code.

• Which platforms are affected by CVE-2022-40957?

  Only Firefox on ARM64 platforms is affected by CVE-2022-40957.

• What is the severity level of CVE-2022-40957?

  CVE-2022-40957 has a severity level of medium with a CVSS score of 6.5.

• How can I fix CVE-2022-40957?

  To fix CVE-2022-40957, update your Firefox ESR to version 102.3 or later, Thunderbird to version 102.3 or later, or Firefox to version 105 or later.

• Where can I find more information about CVE-2022-40957?

  You can find more information about CVE-2022-40957 on the Mozilla Bugzilla page and the Mozilla Security Advisories page.