First published: Tue Jun 06 2023(Updated: )
Memory safety bugs present in Firefox 113. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 114.
Credit: security@mozilla.org security@mozilla.org security@mozilla.org
Affected Software | Affected Version | How to fix |
---|---|---|
ubuntu/firefox | <114.0+ | 114.0+ |
Mozilla Firefox | <114 | 114 |
Mozilla Firefox | <114.0 | |
debian/firefox | 123.0-1 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
(Found alongside the following vulnerabilities)
The severity of CVE-2023-34417 is high.
The memory safety bugs in Mozilla Firefox 113 were reported by Mozilla developers and community members Andrew McCreight, Randell Jesup, and the Mozilla Fuzzing Team.
Yes, there is evidence of memory corruption in CVE-2023-34417.
Yes, a fix is available for CVE-2023-34417 in Mozilla Firefox version 114 or higher.
You can find more information about CVE-2023-34417 at the following references: - Bugzilla: https://bugzilla.mozilla.org/buglist.cgi?bug_id=1746447%2C1820903%2C1832832 - Mozilla Security Advisories: https://www.mozilla.org/security/advisories/mfsa2023-20/ - Launchpad: https://launchpad.net/bugs/cve/CVE-2023-34417