CVE-2023-25733: Null Pointer Dereference

Reference Links

• https://bugzilla.mozilla.org/show_bug.cgi?id=1808632
• https://www.mozilla.org/security/advisories/mfsa2023-05/
• https://launchpad.net/bugs/cve/CVE-2023-25733
• https://www.mozilla.org/en-US/security/advisories/mfsa2023-05/
• https://www.mozilla.org/en-US/security/advisories/mfsa2023-05/#CVE-2023-25745
• https://www.mozilla.org/en-US/security/advisories/mfsa2023-05/#CVE-2023-25733
• https://security-tracker.debian.org/tracker/CVE-2023-25733
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-25733
• https://nvd.nist.gov/vuln/detail/CVE-2023-25733
• https://ubuntu.com/security/CVE-2023-25733

Parent vulnerabilities

(Appears in the following advisories)

• MFSA2023-05

Peer vulnerabilities

(Found alongside the following vulnerabilities)

• CVE-2023-25728
• CVE-2023-25730
• CVE-2023-25743
• CVE-2023-0767
• CVE-2023-25735
• CVE-2023-25737
• CVE-2023-25738
• CVE-2023-25739
• CVE-2023-25729
• CVE-2023-25732
• CVE-2023-25734
• CVE-2023-25740
• CVE-2023-25731
• CVE-2023-25733
• CVE-2023-25736
• CVE-2023-25741
• CVE-2023-25742
• CVE-2023-25744
• CVE-2023-25745

Frequently Asked Questions

• What is CVE-2023-25733?

  CVE-2023-25733 is a vulnerability in Firefox < 110 that could lead to a null pointer dereference due to the lack of verification of the return value from gfx::SourceSurfaceSkia::Map().

• How does CVE-2023-25733 affect Firefox?

  CVE-2023-25733 affects Firefox versions prior to 110.

• What is the severity of CVE-2023-25733?

  CVE-2023-25733 has a low severity level.

• How can I fix CVE-2023-25733?

  To fix CVE-2023-25733, update Firefox to version 110 or higher.

• Where can I find more information about CVE-2023-25733?

  You can find more information about CVE-2023-25733 in the references: [Bugzilla](https://bugzilla.mozilla.org/show_bug.cgi?id=1808632), [Mozilla Security Advisories](https://www.mozilla.org/security/advisories/mfsa2023-05/), [Launchpad](https://launchpad.net/bugs/cve/CVE-2023-25733).