PT-2022-3597 · Mozilla+4 · Firefox+4

Lukas Bernhard · Published 2022-05-31 · Updated 2024-12-12 · CVE-2022-31745

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 101

Description The issue is related to the Garbage Collector component in Firefox browsers. It is associated with the use of the assert() function or similar operators. If array shift operations are not utilized, the Garbage Collector may become confused about valid objects. This could potentially allow a remote attacker to cause a denial of service.

Recommendations For versions prior to 101, update to version 101 or later to resolve the issue.

Exploit

Fix

Improper Validation of Array Index

Assertion Failure

Weakness Enumeration

CWE-129

CWE-617

Related Identifiers

ALT-PU-2022-1988

ALT-PU-2022-2458

ALT-PU-2022-2929

ALT-PU-2022-2930

ALT-PU-2023-1138

ALT-PU-2023-1139

ALT-PU-2023-4336

ALT-PU-2023-4339

BDU:2022-04381

CVE-2022-31745

OESA-2023-1673

OESA-2023-1674

OPENSUSE-SU-2024:12121-1

OPENSUSE-SU-2024:14572-1

USN-5475-1

Affected Products

Alt Linux

Astra Linux

Firefox

Linuxmint

Ubuntu

References · 2186

• 🔥 https://github.com/mistymntncop/CVE-2022-1802 · Exploit
• 🔥 https://github.com/0vercl0k/CVE-2022-28281 · Exploit
• 🔥 https://github.com/mistymntncop/CVE-2022-26485 · Exploit
• 🔥 https://bugzilla.mozilla.org/show_bug.cgi?id=1760944 · Exploit
• 🔥❌ https://github.com/MagicPwnrin/CVE-2022-28282 · Exploit, Deleted
• 🔥❌ https://github.com/Pwnrin/CVE-2022-28282 · Exploit, Deleted
• https://nvd.nist.gov/vuln/detail/CVE-2021-23968 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-45408 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2023-4046 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-22748 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-34471 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-22757 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2023-29539 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2023-32205 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-22738 · Security Note