PT-2022-6965 · Mozilla+4 · Firefox+6

Andrew Mccreight + 2 · Published 2022-04-07 · Updated 2025-10-31 · CVE-2023-29551

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 112 Firefox for Android versions prior to 112 Focus for Android versions prior to 112

Description The issue is related to memory safety bugs, including evidence of memory corruption, which could potentially be exploited to run arbitrary code with sufficient effort. This could allow a remote attacker to access confidential data, compromise its integrity, and cause a denial of service.

Recommendations For Firefox versions prior to 112, update to version 112 or later. For Firefox for Android versions prior to 112, update to version 112 or later. For Focus for Android versions prior to 112, update to version 112 or later.

Exploit

Fix

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

ALT-PU-2023-1621

ALT-PU-2023-1817

ALT-PU-2023-5202

ALT-PU-2023-5754

ALT-PU-2023-6436

ALT-PU-2024-3614

BDU:2023-05888

CVE-2023-29551

OESA-2025-2592

OESA-2025-2593

OPENSUSE-SU-2024:12882-1

OPENSUSE-SU-2024:14572-1

USN-6010-1

USN-6010-2

USN-6010-3

Affected Products

Alt Linux

Astra Linux

Firefox

Firefox For Android

Focus For Android

Linuxmint

Ubuntu

References · 1911

• 🔥 https://github.com/mistymntncop/CVE-2023-4863 · Exploit
• 🔥 https://github.com/LiveOverflow/webp-CVE-2023-4863 · Exploit
• 🔥 https://github.com/wrv/cve-2023-5217-poc · Exploit
• 🔥 https://github.com/UT-Security/cve-2023-5217-poc · Exploit
• 🔥 https://github.com/bbaranoff/CVE-2023-4863 · Exploit
• https://ubuntu.com/security/CVE-2023-29548 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se47-bulletin-2023-0907SE47 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-29536 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-29540 · Vendor Advisory
• https://mozilla.org/security/advisories/mfsa2023-13 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-29539 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-29549 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-29551 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-29533 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-29550 · Vendor Advisory