PT-2023-5271 · Mozilla+4 · Focus For Android+6

Lukas Bernhard

·

Publicado

2023-02-10

·

Atualizado

2025-10-31

·

CVE-2023-29543

CVSS v2.0

10

Alta

VetorAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Firefox versions prior to 112 Firefox for Android versions prior to 112 Focus for Android versions prior to 112
Description The issue is related to a use-after-free of a pointer in a global object's debugger vector, potentially leading to memory corruption. This could allow a remote attacker to access confidential data, compromise its integrity, and cause a denial of service.
Recommendations For Firefox versions prior to 112, update to version 112 or later. For Firefox for Android versions prior to 112, update to version 112 or later. For Focus for Android versions prior to 112, update to version 112 or later.

Correção

Use After Free

Improper Encoding or Escaping of Output

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-416CWE-116

Identificadores relacionados

ALT-PU-2023-1621
ALT-PU-2023-1817
ALT-PU-2023-5202
ALT-PU-2023-5754
ALT-PU-2023-6436
ALT-PU-2024-3614
BDU:2023-05892
CVE-2023-29543
OESA-2025-2592
OESA-2025-2593
OPENSUSE-SU-2024:12882-1
OPENSUSE-SU-2024:14572-1
USN-6010-1
USN-6010-2
USN-6010-3

Produtos afetados

Alt Linux
Astra Linux
Firefox
Firefox For Android
Focus For Android
Linuxmint
Ubuntu