CVE-2022-46882: Use After Free
A use-after-free in WebGL extensions could have led to a potentially exploitable crash.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Thunderbirdto a version that resolves this vulnerability.Fixed in 102.6 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 107 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 102.6 - Upgrade
Upgrade
alpine/firefox-esrto a version that resolves this vulnerability.Fixed in 102.6.0-r0 - Upgrade
Upgrade
debian/firefox-esrto a version that resolves this vulnerability.Fixed in 102.6.0esr-1 - Upgrade
Upgrade
debian/thunderbirdto a version that resolves this vulnerability.Fixed in 1:102.6.0-1 - Upgrade
Upgrade
debian/firefoxto a version that resolves this vulnerability.Fixed in 159.0.1-1 - Upgrade
Upgrade
debian/firefox-esrto a version that resolves this vulnerability.Fixed in 140.12.0esr-1~deb12u1Fixed in 153.6.0esr-1~deb12u2Fixed in 140.15.0esr-1~deb13u1Fixed in 153.6.0esr-1~deb13u1Fixed in 153.5.1esr-1Fixed in 153.6.0esr-1 - Upgrade
Upgrade
debian/thunderbirdto a version that resolves this vulnerability.Fixed in 1:140.12.0esr-1~deb12u1Fixed in 1:153.6.0esr-1~deb12u2Fixed in 1:140.12.0esr-1~deb13u1Fixed in 1:153.6.0esr-1~deb13u1Fixed in 1:153.5.0esr-1Fixed in 1:153.6.0esr-1 - Upgrade
Upgrade
redhat/firefoxto a version that resolves this vulnerability.Fixed in 102.6 - Upgrade
Upgrade
redhat/thunderbirdto a version that resolves this vulnerability.Fixed in 102.6 - Upgrade
Upgrade
Firefoxto a version that resolves this vulnerability.Fixed in 107 - Upgrade
Upgrade
Firefox ESRto a version that resolves this vulnerability.Fixed in 102.6
Event History
Parent advisories
This vulnerability appears in the following advisories.
Peer vulnerabilities
Found alongside the following vulnerabilities.
- CVE-2022-46880
- CVE-2022-46872
- CVE-2022-46881
- CVE-2022-46875
- CVE-2022-46882
- CVE-2022-46878
- CVE-2022-45403
- CVE-2022-45404
- CVE-2022-45405
- CVE-2022-45406
- CVE-2022-45407
- CVE-2022-45408
- CVE-2022-45409
- CVE-2022-45410
- CVE-2022-45411
- CVE-2022-45412
- CVE-2022-45413
- CVE-2022-40674
- CVE-2022-45415
- CVE-2022-45416
- CVE-2022-45417
- CVE-2022-45418
- CVE-2022-45419
- CVE-2022-45420
- CVE-2022-45421
- CVE-2022-46883
- CVE-2022-46874
- DLA-3241-1
- DLA-3242-1
Frequently Asked Questions
What is CVE-2022-46882?
CVE-2022-46882 is a use-after-free vulnerability in WebGL extensions.
What is the severity of CVE-2022-46882?
CVE-2022-46882 has a severity rating of 9.8 (Critical).
Which softwares are affected by CVE-2022-46882?
CVE-2022-46882 affects Mozilla Thunderbird, Mozilla Firefox, and Mozilla Firefox ESR.
How can CVE-2022-46882 be fixed?
CVE-2022-46882 can be fixed by updating to the respective remedied versions of Mozilla Thunderbird, Mozilla Firefox, or Mozilla Firefox ESR.
Where can I find more information about CVE-2022-46882?
You can find more information about CVE-2022-46882 at the following references: - [Bugzilla](https://bugzilla.mozilla.org/show_bug.cgi?id=1789371) - [Mozilla Security Advisory MFS2022-53](https://www.mozilla.org/en-US/security/advisories/mfsa2022-53/) - [Mozilla Security Advisory MFS2022-47](https://www.mozilla.org/en-US/security/advisories/mfsa2022-47/)