CVE-2023-6204: Medium severity thunderbird vulnerability
On some systems—depending on the graphics settings and drivers—it was possible to force an out-of-bounds read and leak memory data into the images created on the canvas element. This vulnerability affects Firefox < 120, Firefox ESR < 115.5.0, and Thunderbird < 115.5.
Other sources
On some systems—depending on the graphics settings and drivers—it was possible to force an out-of-bounds read and leak memory data into the images created on the canvas element.
External Reference: https://www.mozilla.org/en-US/security/advisories/mfsa2023-50/#CVE-2023-6204
— Red Hat
Affected Software
Event History
Parent advisories
This vulnerability appears in the following advisories.
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
What is the severity of CVE-2023-6204?
The severity of CVE-2023-6204 is high.
Which systems are affected by CVE-2023-6204?
CVE-2023-6204 affects systems with Firefox versions < 120, Firefox versions < 115.5, and Thunderbird versions < 115.5.0.
How can CVE-2023-6204 be exploited?
CVE-2023-6204 can be exploited by forcing an out-of-bounds read and leaking memory data into canvas element images.
What is the remedy for CVE-2023-6204?
The remedy for CVE-2023-6204 is to update Firefox to version 120 or higher, Firefox to version 115.5 or higher, or Thunderbird to version 115.5.0 or higher.
Where can I find more information about CVE-2023-6204?
You can find more information about CVE-2023-6204 in the Mozilla bugzilla and security advisories: [Mozilla Bugzilla](https://bugzilla.mozilla.org/show_bug.cgi?id=1841050), [Mozilla Security Advisory 2023-49](https://www.mozilla.org/security/advisories/mfsa2023-49/), [Mozilla Security Advisory 2023-50](https://www.mozilla.org/security/advisories/mfsa2023-50/).