CVE-2023-6866

2023-12-1913:38:48

mozilla

github.com

typedarrays

fallible

exception handling

apis

abuse

vulnerability

firefox

AI Score

8.1

Confidence

High

SSVC

Exploitation

none

Automatable

Technical Impact

total

JSON

TypedArrays can be fallible and lacked proper exception handling. This could lead to abuse in other APIs which expect TypedArrays to always succeed. This vulnerability affects Firefox < 121.

ADP Affected

[
  {
    "cpes": [
      "cpe:2.3:a:mozilla:firefox:-:*:*:*:*:*:*:*"
    ],
    "vendor": "mozilla",
    "product": "firefox",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "121",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  }
]