The garbage collector could have been aborted in several states and zones and <code>GCRuntime::finishCollection</code> may not have been called, leading to a use-after-free and potentially exploitable crash. This vulnerability affects Firefox ESR < 102.5, Thunderbird < 102.5, and Firefox < 107.
References
Link | Resource |
---|---|
https://bugzilla.mozilla.org/show_bug.cgi?id=1796901 | Issue Tracking Permissions Required Vendor Advisory |
https://www.mozilla.org/security/advisories/mfsa2022-47/ | Vendor Advisory |
https://www.mozilla.org/security/advisories/mfsa2022-48/ | Vendor Advisory |
https://www.mozilla.org/security/advisories/mfsa2022-49/ | Vendor Advisory |
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: mozilla
Published: 2022-12-22T00:00:00
Updated: 2022-12-22T00:00:00
Reserved: 2022-11-14T00:00:00
Link: CVE-2022-45409
JSON object: View
NVD Information
Status : Analyzed
Published: 2022-12-22T20:15:42.843
Modified: 2023-01-04T17:08:26.530
Link: CVE-2022-45409
JSON object: View
Redhat Information
No data.
CWE