CVE-2023-6205: Use After Free
It was possible to cause the use of a MessagePort after it had already been freed, which could potentially have led to an exploitable crash.
Affected Software
Event History
Parent advisories
This vulnerability appears in the following advisories.
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
What is CVE-2023-6205?
CVE-2023-6205 is a vulnerability that allows the use of a MessagePort after it has been freed, potentially leading to an exploitable crash.
Which software is affected by CVE-2023-6205?
Mozilla Firefox versions prior to 120, Mozilla Firefox versions prior to 115.5, and Mozilla Thunderbird versions prior to 115.5.0 are affected by CVE-2023-6205.
What is the severity of CVE-2023-6205?
CVE-2023-6205 has a severity level of high (7 out of 10).
How can I fix CVE-2023-6205?
To fix CVE-2023-6205, update your Mozilla Firefox or Mozilla Thunderbird to the recommended versions: Firefox 120 or later, Firefox 115.5.0 or later, or Thunderbird 115.5.0 or later.
Where can I find more information about CVE-2023-6205?
You can find more information about CVE-2023-6205 in the following references: [Mozilla Bugzilla](https://bugzilla.mozilla.org/show_bug.cgi?id=1854076), [Mozilla Security Advisories](https://www.mozilla.org/security/advisories/mfsa2023-49/), [Mozilla Security Advisories](https://www.mozilla.org/security/advisories/mfsa2023-50/).