Lucene search

K
vulnrichmentMozillaVULNRICHMENT:CVE-2023-5171
HistorySep 27, 2023 - 2:13 p.m.

CVE-2023-5171

2023-09-2714:13:12
mozilla
github.com
ion compilation
garbage collection
use-after-free
firefox
thunderbird
vulnerability

AI Score

6.3

Confidence

Low

SSVC

Exploitation

none

Automatable

no

Technical Impact

partial

During Ion compilation, a Garbage Collection could have resulted in a use-after-free condition, allowing an attacker to write two NUL bytes, and cause a potentially exploitable crash. This vulnerability affects Firefox < 118, Firefox ESR < 115.3, and Thunderbird < 115.3.