CVE-2023-25738

Reference Links

• https://bugzilla.mozilla.org/show_bug.cgi?id=1811852
• https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/
• https://www.mozilla.org/en-US/security/advisories/mfsa2023-05/
• https://www.mozilla.org/en-US/security/advisories/mfsa2023-06/
• https://www.mozilla.org/en-US/security/advisories/mfsa2023-07/#CVE-2023-25746
• https://www.mozilla.org/security/advisories/mfsa2023-05/
• https://www.mozilla.org/security/advisories/mfsa2023-06/
• https://www.mozilla.org/security/advisories/mfsa2023-07/

Parent vulnerabilities

(Appears in the following advisories)

• MFSA2023-07
• MFSA2023-06
• MFSA2023-05

Peer vulnerabilities

(Found alongside the following vulnerabilities)

• CVE-2023-0616
• CVE-2023-25728
• CVE-2023-25730
• CVE-2023-0767
• CVE-2023-25735
• CVE-2023-25737
• CVE-2023-25738
• CVE-2023-25739
• CVE-2023-25729
• CVE-2023-25732
• CVE-2023-25734
• CVE-2023-25742
• CVE-2023-25746
• CVE-2023-25744
• CVE-2023-25743
• CVE-2023-25740
• CVE-2023-25731
• CVE-2023-25733
• CVE-2023-25736
• CVE-2023-25741
• CVE-2023-25745

Frequently Asked Questions

• What is CVE-2023-25738?

  CVE-2023-25738 is a vulnerability that affects Firefox on Windows, allowing for out-of-bounds access to variables due to invalid values in the DEVMODEW struct set by the printer device driver.

• How does CVE-2023-25738 impact users?

  CVE-2023-25738 may lead to browser crashes, arbitrary code execution, or potential exploitation of other vulnerabilities.

• Which versions of Firefox are affected by CVE-2023-25738?

  Firefox versions up to and excluding 110 are affected by CVE-2023-25738.

• How can I fix CVE-2023-25738?

  Update your Firefox browser to version 110 or higher to address CVE-2023-25738.

• Where can I find more information about CVE-2023-25738?

  You can find more information about CVE-2023-25738 on the Mozilla Security Advisories: MFSA2023-05 and MFSA2023-07, as well as the bug report on Bugzilla.