TI-2023-04228 CVE-2023-4584 · GHSA-rcxp-78cq-8wg3
Out-of-bounds write in Mozilla Firefox
Priority MEDIUM 40
Memory safety bugs present in Firefox 116, Firefox ESR 102.14, Firefox ESR 115.1, Thunderbird 102.14, and Thunderbird 115.1.
Vulnerabilities
6 records
TI-2023-04225 CVE-2023-4581 · GHSA-r5px-qx88-c9gq
XLL file extensions were downloadable without warnings
Priority LOW 21
Excel `.xll` add-in files did not have a blocklist entry in Firefox's executable blocklist which allowed them to be downloaded without any warning of their potential harm.
TI-2023-04220 CVE-2023-4576 · GHSA-qcr8-g46x-v65q
Integer Overflow in RecordedSourceSurfaceCreation
Priority MEDIUM 45
On Windows, an integer overflow could occur in `RecordedSourceSurfaceCreation` which resulted in a heap buffer overflow potentially leaking sensitive data that could have led to a sandbox escape.
TI-2023-04219 CVE-2023-4575 · GHSA-7qvm-4564-f42g
Memory corruption in IPC FilePickerShownCallback
Priority LOW 30
When creating a callback over IPC for showing the File Picker window, multiple of the same callbacks could have been created at a time and eventually all simultaneously destroyed as soon as one of the callbacks finished.
TI-2023-04218 CVE-2023-4574 · GHSA-hc92-m58j-m3m5
Memory corruption in IPC ColorPickerShownCallback
Priority LOW 30
When creating a callback over IPC for showing the Color Picker window, multiple of the same callbacks could have been created at a time and eventually all simultaneously destroyed as soon as one of the callbacks finished…
TI-2023-04217 CVE-2023-4573 · GHSA-vfg8-wvhv-f2g4
Memory corruption in IPC CanvasTranslator
Priority LOW 36
When receiving rendering data over IPC `mStream` could have been destroyed when initialized, which could have led to a use-after-free causing a potentially exploitable crash.