CVE-2023-4582: Buffer Overflow in WebGL glGetProgramiv
Due to large allocation checks in Angle for glsl shaders being too lenient a buffer overflow could have occured when allocating too much private shader memory on mac OS. This bug only affects Firefox on macOS. Other operating systems are unaffected. This vulnerability affects Firefox < 117, Firefox ESR < 115.2, and Thunderbird < 115.2.
Other sources
Due to large allocation checks in Angle for glsl shaders being too lenient a buffer overflow could have occurred when allocating too much private shader memory on mac OS. This bug only affects Firefox on macOS. Other operating systems are unaffected. This vulnerability affects Firefox < 117, Firefox ESR < 115.2, and Thunderbird < 115.2.
— MITRE
Due to large allocation checks in Angle for glsl shaders being too lenient a buffer overflow could have occurred when allocating too much private shader memory on mac OS. This bug only affects Firefox on macOS. Other operating systems are unaffected.
— Mozilla
Affected Software
Event History
Parent advisories
This vulnerability appears in the following advisories.
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
What is CVE-2023-4582?
CVE-2023-4582 is a vulnerability that could result in a buffer overflow when allocating too much private shader memory on macOS in Firefox versions before 117.
Which operating systems are affected by CVE-2023-4582?
Only macOS is affected by CVE-2023-4582. Other operating systems are unaffected.
What is the severity of CVE-2023-4582?
CVE-2023-4582 has a severity rating of 8.8 (high).
How can I fix CVE-2023-4582?
To fix CVE-2023-4582, make sure you update Firefox to version 117 or higher.
Where can I find more information about CVE-2023-4582?
You can find more information about CVE-2023-4582 in the Mozilla Security Advisory [link](https://www.mozilla.org/en-US/security/advisories/mfsa2023-36/).