PT-2023-9058 · Mozilla+4 · Firefox+4
Sonakkbi
·
Publicado
2023-08-02
·
Atualizado
2025-03-14
·
CVE-2023-5170
CVSS v2.0
7.8
Alta
| Vetor | AV:N/AC:L/Au:N/C:C/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
Firefox versions prior to 118
Description
The issue is related to a memory leak in the canvas rendering process. A compromised content process could cause a surface to change unexpectedly, leading to a memory leak of a privileged process. This could potentially be used to effect a sandbox escape if the correct data was leaked. The vulnerability is associated with incorrect memory release before removing the last reference.
Recommendations
For versions prior to 118, update to version 118 or later to resolve the issue. As a temporary workaround, consider restricting access to canvas rendering functionality until a patch is available.
Correção
Memory Leak
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Alt Linux
Astra Linux
Firefox
Linuxmint
Ubuntu