CVE-2023-6866

Reference Links

• https://bugzilla.mozilla.org/show_bug.cgi?id=1849037
• https://www.mozilla.org/security/advisories/mfsa2023-56/
• https://security.gentoo.org/glsa/202401-10
• https://launchpad.net/bugs/cve/CVE-2023-6866
• https://www.mozilla.org/en-US/security/advisories/mfsa2023-56/
• https://www.mozilla.org/en-US/security/advisories/mfsa2023-56/#CVE-2023-6866
• https://security-tracker.debian.org/tracker/CVE-2023-6866
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-6866
• https://nvd.nist.gov/vuln/detail/CVE-2023-6866
• https://ubuntu.com/security/CVE-2023-6866

Parent vulnerabilities

(Appears in the following advisories)

• MFSA2023-56

Peer vulnerabilities

(Found alongside the following vulnerabilities)

• CVE-2023-6856
• CVE-2023-6135
• CVE-2023-6865
• CVE-2023-6857
• CVE-2023-6858
• CVE-2023-6859
• CVE-2023-6866
• CVE-2023-6860
• CVE-2023-6867
• CVE-2023-6861
• CVE-2023-6868
• CVE-2023-6869
• CVE-2023-6870
• CVE-2023-6871
• CVE-2023-6872
• CVE-2023-6863
• CVE-2023-6864
• CVE-2023-6873

Frequently Asked Questions

• What is the severity of CVE-2023-6866?

  CVE-2023-6866 is considered a moderate severity vulnerability due to improper exception handling in TypedArrays.

• How do I fix CVE-2023-6866?

  To fix CVE-2023-6866, upgrade to the latest version of Firefox, specifically version 134.0.2-2 or later.

• What software is affected by CVE-2023-6866?

  CVE-2023-6866 affects Mozilla Firefox versions prior to 121.

• What are the potential impacts of CVE-2023-6866?

  CVE-2023-6866 could lead to abuse in other APIs that rely on TypedArrays functioning correctly.

• Is CVE-2023-6866 present in Debian's Firefox package?

  Yes, Debian's Firefox packages prior to version 134.0.2-2 may be vulnerable to CVE-2023-6866.