Lucene search

K
alpinelinuxAlpine Linux Development TeamALPINE:CVE-2023-5170
HistorySep 27, 2023 - 3:19 p.m.

CVE-2023-5170

2023-09-2715:19:00
Alpine Linux Development Team
security.alpinelinux.org
6
canvas rendering
memory leak
sandbox escape
firefox
unix

0.001 Low

EPSS

Percentile

28.3%

In canvas rendering, a compromised content process could have caused a surface to change unexpectedly, leading to a memory leak of a privileged process. This memory leak could be used to effect a sandbox escape if the correct data was leaked. This vulnerability affects Firefox < 118.

OSVersionArchitecturePackageVersionFilename
Alpine3.18-communitynoarchfirefox= 116.0.3-r0UNKNOWN