CVE-2023-4049: Use After Free
Published Aug 1, 2023
·Updated
Last updated 24 July 2024
Other sources
Race conditions in reference counting code were found through code inspection. These could have resulted in potentially exploitable use-after-free vulnerabilities.
— Mozilla
Affected Software
19 affected componentsFixes available
redhat/firefox<102.14
102.14
redhat/firefox<115.1
115.1
redhat/thunderbird<102.14
102.14
redhat/thunderbird<115.1
115.1
Mozilla Thunderbird<115.1
115.1
Mozilla Thunderbird<102.14
102.14
Mozilla Firefox<116
116
Mozilla Firefox ESR<115.1
115.1
Mozilla Firefox ESR<102.14
102.14
Mozilla Firefox<116.0
Mozilla Firefox>=102.0<102.14
Mozilla Firefox>=115.0<115.1
Debian Debian Linux=11.0
Debian Debian Linux=12.0
Mozilla Firefox ESR>=102.0<102.14
Mozilla Firefox ESR>=115.0<115.1
debian/firefox
137.0.2-1
debian/firefox-esr
115.14.0esr-1~deb11u1128.9.0esr-1~deb11u1128.8.0esr-1~deb12u1128.9.0esr-1~deb12u1128.9.0esr-2
debian/thunderbird
1:115.12.0-1~deb11u11:128.9.0esr-1~deb11u11:128.8.0esr-1~deb12u11:128.9.0esr-1~deb12u11:128.9.0esr-1
Event History
Aug 1, 2023
CVE Published
via Mozilla·12:00 AM
CVE Published
via MITRE·02:58 PM
Data Sourced
via MITRE·02:58 PM
DescriptionWeakness
Data Sourced
03:15 PM
Description
Jan 12, 2024
Data Sourced
via Launchpad·12:24 AM
Description
Sep 16, 2024
Data Sourced
via Ubuntu·04:16 AM
RemedyDescriptionSeverityAffected Software
Mar 27, 2025
Data Sourced
via Debian·02:08 PM
DescriptionAffected Software
Parent advisories
This vulnerability appears in the following advisories.
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
1
What is the severity of CVE-2023-4049?
The severity of CVE-2023-4049 is high.
2
Which software versions are affected by CVE-2023-4049?
The affected software versions are Firefox <116, Firefox ESR <102.14, and Firefox ESR <115.1.
3
How can I fix CVE-2023-4049?
To fix CVE-2023-4049, update to Firefox version 116 or later, Firefox ESR version 102.14 or later, or Firefox ESR version 115.1 or later.
4
Where can I find more information about CVE-2023-4049?
You can find more information about CVE-2023-4049 in the following references: [link1], [link2], [link3].