The vulnerability in the implementation of the WebGL 3D graphics application programming interface for Firefox, Firefox ESR, and Thunderbird email client allows a perpetrator to access confidential data, compromise its integrity, and cause service failures.

🗓️ 23 Sep 2024 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 3 Views

Use-after-free in WebGL API on Firefox, Firefox ESR, Thunderbird leaks data and disrupts service.

Reporter	Title	Published	Views	Family All 221
IBM Security Bulletins	Security Bulletin: Due to use of Mozilla Firefox, IBM Cloud Pak for Multicloud Management Monitoring is vulnerable to multiple vulnerabilities.	31 Aug 202311:04	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities of Mozilla Firefox (less than Firefox 102.6ESR) have affected Synthetic Playback Agent 8.1.4.0-8.1.4 IF16	15 Feb 202310:00	–	ibm
Tenable Nessus	Amazon Linux 2 : thunderbird (ALAS-2023-1951)	23 Feb 202300:00	–	nessus
Tenable Nessus	Amazon Linux 2 : firefox (ALASFIREFOX-2023-008)	27 Sep 202300:00	–	nessus
Tenable Nessus	AlmaLinux 9 : firefox (ALSA-2022:9065)	16 Dec 202200:00	–	nessus
Tenable Nessus	AlmaLinux 8 : firefox (ALSA-2022:9067)	16 Dec 202200:00	–	nessus
Tenable Nessus	AlmaLinux 8 : thunderbird (ALSA-2022:9074)	16 Dec 202200:00	–	nessus
Tenable Nessus	AlmaLinux 9 : thunderbird (ALSA-2022:9080)	16 Dec 202200:00	–	nessus
Tenable Nessus	CentOS 7 : firefox (RHSA-2022:9072)	9 Oct 202400:00	–	nessus
Tenable Nessus	CentOS 7 : thunderbird (RHSA-2022:9079)	9 Oct 202400:00	–	nessus

Vulners

Node

mozilla thunderbirdRange<102.6

OR

mozilla firefox_esrRange<102.6

OR

mozilla firefoxRange<107

Source	Link
bugzilla	www.bugzilla.mozilla.org/show_bug.cgi
nvd	www.nvd.nist.gov/vuln/detail/CVE-2022-46882
security-tracker	www.security-tracker.debian.org/tracker/CVE-2022-46882
wiki	www.wiki.astralinux.ru/astra-linux-se17-bulletin-2023-0303SE17MD
mozilla	www.mozilla.org/en-US/security/advisories/mfsa2022-47/
mozilla	www.mozilla.org/en-US/security/advisories/mfsa2022-52/
mozilla	www.mozilla.org/en-US/security/advisories/mfsa2022-53/
mozilla	www.mozilla.org/security/advisories/mfsa2022-47/
mozilla	www.mozilla.org/security/advisories/mfsa2022-52/
mozilla	www.mozilla.org/security/advisories/mfsa2022-53/

07 Feb 2025 00:00Current

7.7High risk

Vulners AI Score7.7

CVSS 39.8

CVSS 210

EPSS0.00921

webgl interface firefox browser thunderbird client memory vulnerability data leakage service disruption