CVE-2023-5172: Use After Free
Published Sep 26, 2023
·Updated
A hashtable in the Ion Engine could have been mutated while there was a live interior reference, leading to a potential use-after-free and exploitable crash.
Affected Software
3 affected componentsFixes available
Mozilla Firefox<118
118
Mozilla Firefox<118
debian/firefox
137.0.2-1
Event History
Sep 26, 2023
CVE Published
via Mozilla·12:00 AM
Sep 27, 2023
CVE Published
via MITRE·02:13 PM
Data Sourced
via MITRE·02:13 PM
DescriptionWeakness
Jan 12, 2024
Data Sourced
via Launchpad·12:28 AM
Description
Sep 20, 2024
Data Sourced
via Ubuntu·02:31 AM
RemedyDescriptionSeverityAffected Software
Mar 27, 2025
Data Sourced
via Debian·04:44 AM
DescriptionAffected Software
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
1
What is the vulnerability ID?
The vulnerability ID is CVE-2023-5172.
2
What is the severity of CVE-2023-5172?
The severity of CVE-2023-5172 is high.
3
Which software is affected by CVE-2023-5172?
Mozilla Firefox version up to 118 is affected by CVE-2023-5172.
4
How can CVE-2023-5172 be exploited?
CVE-2023-5172 can be exploited through a use-after-free vulnerability.
5
Where can I find more information about CVE-2023-5172?
You can find more information about CVE-2023-5172 in the Mozilla Bugzilla entry (https://bugzilla.mozilla.org/show_bug.cgi?id=1852218) and the Mozilla Security Advisory (https://www.mozilla.org/en-US/security/advisories/mfsa2023-41/).