CVE-2023-4584: Memory safety bugs fixed in Firefox 117, Firefox ESR 102.15, Firefox ESR 115.2, Thunderbird 102.15, and Thunderbird 115.2
Last updated 24 July 2024
Other sources
Memory safety bugs present in Firefox 116, Firefox ESR 102.14, Firefox ESR 115.1, Thunderbird 102.14, and Thunderbird 115.1. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code.
— Mozilla
Affected Software
Event History
Parent advisories
This vulnerability appears in the following advisories.
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
What is the severity of CVE-2023-4584?
The severity of CVE-2023-4584 is high (8.8).
Which software versions are affected by CVE-2023-4584?
Firefox 116, Firefox ESR 102.14, Firefox ESR 115.1, Thunderbird 102.14, and Thunderbird 115.1 are affected by CVE-2023-4584.
What is the remedy for CVE-2023-4584?
Update Mozilla Thunderbird to version 102.15 or higher, or update Mozilla Firefox to version 117 or higher.
Is there any evidence of memory corruption in CVE-2023-4584?
Yes, there is evidence of memory corruption in CVE-2023-4584.
Is there a possibility of arbitrary code execution in CVE-2023-4584?
Yes, there is a possibility of arbitrary code execution in CVE-2023-4584.