TI-2022-23228 CVE-2022-46885 · GHSA-g867-grx9-vj64
Out-of-bounds write in Mozilla Firefox
Priority MEDIUM 47
Mozilla developers Timothy Nikkel, Ashley Hale, and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 105.
Vulnerabilities
7 records
TI-2022-20918 CVE-2022-42932 · GHSA-mw2h-r48f-g8c9
Out-of-bounds write in Mozilla Firefox
Priority MEDIUM 41
Mozilla developers Ashley Hale and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 105 and Firefox ESR 102.3.
TI-2022-20917 CVE-2022-42931 · GHSA-748v-pxm5-9m8q
Cleartext storage of sensitive information in Mozilla Firefox
Priority MEDIUM 49
Logins saved by Firefox should be managed by the Password Manager component which uses encryption to save files on-disk.
TI-2022-20916 CVE-2022-42930 · GHSA-737f-pfm5-cmq6
Race condition in Mozilla Firefox
Priority LOW 34
If two Workers were simultaneously initializing their CacheStorage, a data race could have occurred in the `ThirdPartyUtil` component.
TI-2022-20915 CVE-2022-42929 · GHSA-6j29-45pf-r9wm
Uncontrolled resource consumption in Mozilla Firefox
Priority LOW 30
If a website called `window.print()` in a particular way, it could cause a denial of service of the browser, which may persist beyond browser restart depending on the user's session restore settings.
TI-2022-20914 CVE-2022-42928 · GHSA-4jg9-9xg2-cc8h
NULL pointer dereference in Mozilla Firefox
Priority MEDIUM 42
Certain types of allocations were missing annotations that, if the Garbage Collector was in a specific state, could have lead to memory corruption and a potentially exploitable crash.
TI-2022-20913 CVE-2022-42927 · GHSA-9jhw-8cjq-cxc8
Origin validation error in Mozilla Firefox
Priority HIGH 70
A same-origin policy violation could have allowed the theft of cross-origin URL entries, leaking the result of a redirect, via `performance.getEntries()`.