CVE-2022-45405: Use After Free
Freeing arbitrary nsIInputStream's on a different thread than creation could have led to a use-after-free and potentially exploitable crash.
External Reference:
https://www.mozilla.org/en-US/security/advisories/mfsa2022-49/#CVE-2022-45405
Other sources
Freeing arbitrary <code>nsIInputStream</code>'s on a different thread than creation could have led to a use-after-free and potentially exploitable crash. This vulnerability affects Firefox ESR < 102.5, Thunderbird < 102.5, and Firefox < 107.
Freeing arbitrary nsIInputStream's on a different thread than creation could have led to a use-after-free and potentially exploitable crash.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Thunderbirdto a version that resolves this vulnerability.Fixed in 102.5 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 102.5 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 107 - Upgrade
Upgrade
alpine/firefox-esrto a version that resolves this vulnerability.Fixed in 102.5.0-r0 - Upgrade
Upgrade
debian/firefox-esrto a version that resolves this vulnerability.Fixed in 102.5.0esr-1 - Upgrade
Upgrade
debian/thunderbirdto a version that resolves this vulnerability.Fixed in 1:102.5.0-1 - Upgrade
Upgrade
debian/firefoxto a version that resolves this vulnerability.Fixed in 159.0.1-1 - Upgrade
Upgrade
debian/firefox-esrto a version that resolves this vulnerability.Fixed in 140.12.0esr-1~deb12u1Fixed in 153.6.0esr-1~deb12u2Fixed in 140.15.0esr-1~deb13u1Fixed in 153.6.0esr-1~deb13u1Fixed in 153.5.1esr-1Fixed in 153.6.0esr-1 - Upgrade
Upgrade
debian/thunderbirdto a version that resolves this vulnerability.Fixed in 1:140.12.0esr-1~deb12u1Fixed in 1:153.6.0esr-1~deb12u2Fixed in 1:140.12.0esr-1~deb13u1Fixed in 1:153.6.0esr-1~deb13u1Fixed in 1:153.5.0esr-1Fixed in 1:153.6.0esr-1 - Upgrade
Upgrade
redhat/thunderbirdto a version that resolves this vulnerability.Fixed in 102.5 - Upgrade
Upgrade
redhat/firefoxto a version that resolves this vulnerability.Fixed in 102.5
Event History
Parent advisories
This vulnerability appears in the following advisories.
Peer vulnerabilities
Found alongside the following vulnerabilities.
- CVE-2022-45403
- CVE-2022-45404
- CVE-2022-45405
- CVE-2022-45406
- CVE-2022-45408
- CVE-2022-45409
- CVE-2022-45410
- CVE-2022-45411
- CVE-2022-45412
- CVE-2022-45416
- CVE-2022-45418
- CVE-2022-45420
- CVE-2022-45421
- CVE-2022-45407
- CVE-2022-45413
- CVE-2022-40674
- CVE-2022-45415
- CVE-2022-45417
- CVE-2022-46882
- CVE-2022-45419
- CVE-2022-46883
- DLA-3196-1
- DLA-3199-1
Frequently Asked Questions
What is CVE-2022-45405?
CVE-2022-45405 is a vulnerability that allows freeing arbitrary nsIInputStream's on a different thread than creation, leading to a use-after-free and potentially exploitable crash.
Which software is affected by CVE-2022-45405?
CVE-2022-45405 affects Firefox ESR versions before 102.5, Thunderbird versions before 102.5, and Firefox versions before 107.
What is the severity of CVE-2022-45405?
The severity of CVE-2022-45405 is high with a CVSS score of 6.5.
How can CVE-2022-45405 be exploited?
CVE-2022-45405 can be exploited by freeing arbitrary nsIInputStream's on a different thread than creation, causing a use-after-free vulnerability.
How can I fix CVE-2022-45405?
To fix CVE-2022-45405, update Firefox ESR to version 102.5 or later, Thunderbird to version 102.5 or later, or Firefox to version 107 or later.