PT-2021-7888 · Mozilla+4 · Firefox+4

Gabriele Svelto

+2

·

Published

2021-10-17

·

Updated

2025-03-14

·

CVE-2022-46879

CVSS v2.0

10

High

VectorAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Firefox versions prior to 108
Description The issue is related to memory safety bugs, including evidence of memory corruption, which could potentially be exploited to run arbitrary code. It is also described as a buffer overflow vulnerability that could allow a remote attacker to access confidential data, compromise its integrity, and cause a denial of service.
Recommendations For versions prior to 108, update to version 108 or later to resolve the issue. As a temporary workaround, consider restricting access to sensitive data and monitoring for signs of exploitation until the update can be applied.

Exploit

Fix

Memory Corruption

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

ALT-PU-2022-3356
ALT-PU-2023-1043
ALT-PU-2023-5754
ALT-PU-2023-6436
ALT-PU-2024-3614
BDU:2023-00384
BDU:2023-04802
CVE-2022-46879
OESA-2025-1265
OESA-2025-1268
OPENSUSE-SU-2024:12577-1
OPENSUSE-SU-2024:14572-1
USN-5782-1
USN-5782-2
USN-5782-3

Affected Products

Alt Linux
Astra Linux
Firefox
Linuxmint
Ubuntu