PT-2022-7572 · Mozilla+9 · Thunderbird+11

Karl · Published 2022-05-24 · Updated 2024-06-15 · CVE-2022-46881

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 106 Firefox ESR versions prior to 102.6 Thunderbird versions prior to 102.6

Description The issue is related to an optimization in WebGL that was incorrect in some cases, potentially leading to memory corruption and a crash that could be exploited. This could allow a remote attacker to access confidential data, compromise its integrity, and cause a denial of service.

Recommendations For Firefox versions prior to 106, update to Firefox 106 or later. For Firefox ESR versions prior to 102.6, update to Firefox ESR 102.6 or later. For Thunderbird versions prior to 102.6, update to Thunderbird 102.6 or later.

Exploit

Fix

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

ALSA-2022:9065

ALSA-2022:9067

ALSA-2022:9074

ALSA-2022:9080

ALT-PU-2022-2886

ALT-PU-2022-3047

ALT-PU-2022-3341

ALT-PU-2022-3354

ALT-PU-2022-3401

ALT-PU-2022-3407

ALT-PU-2023-1137

ALT-PU-2023-1138

ALT-PU-2023-4335

ALT-PU-2023-4336

ALT-PU-2023-5754

ALT-PU-2024-3614

BDU:2024-07329

CESA-2022_9067

CESA-2022_9074

CVE-2022-46881

DLA-3241-1

DLA-3242-1

DSA-5301-1

DSA-5303-1

MGASA-2022-0475

MGASA-2022-0476

OPENSUSE-SU-2022_4462-1

OPENSUSE-SU-2022_4579-1

OPENSUSE-SU-2024:12568-1

OPENSUSE-SU-2024:12571-1

RHSA-2022:9065

RHSA-2022:9066

RHSA-2022:9067

RHSA-2022:9068

RHSA-2022:9069

RHSA-2022:9070

RHSA-2022:9071

RHSA-2022:9072

RHSA-2022:9074

RHSA-2022:9075

RHSA-2022:9076

RHSA-2022:9077

RHSA-2022:9078

RHSA-2022:9079

RHSA-2022:9080

RHSA-2022:9081

RHSA-2022_9065

RHSA-2022_9067

RHSA-2022_9072

RHSA-2022_9074

RHSA-2022_9079

RHSA-2022_9080

RLSA-2022:9067

SUSE-SU-2022:4460-1

SUSE-SU-2022:4461-1

SUSE-SU-2022:4462-1

SUSE-SU-2022:4579-1

USN-5824-1

Affected Products

Alt Linux

Almalinux

Astra Linux

Centos

Firefox

Firefox Esr

Linuxmint

Red Hat

Rocky Linux

Suse

Thunderbird

Ubuntu

References · 135

• 🔥 https://github.com/mistymntncop/CVE-2023-4863 · Exploit
• 🔥 https://github.com/mistymntncop/CVE-2022-1802 · Exploit
• 🔥 https://github.com/0vercl0k/CVE-2022-28281 · Exploit
• 🔥 https://github.com/LiveOverflow/webp-CVE-2023-4863 · Exploit
• 🔥 https://github.com/mistymntncop/CVE-2022-26485 · Exploit
• 🔥 https://github.com/UT-Security/cve-2023-5217-poc · Exploit
• 🔥 https://github.com/wrv/cve-2023-5217-poc · Exploit
• 🔥 https://github.com/bbaranoff/CVE-2023-4863 · Exploit
• 🔥❌ https://github.com/Pwnrin/CVE-2022-28282 · Exploit, Deleted
• 🔥❌ https://github.com/MagicPwnrin/CVE-2022-28282 · Exploit, Deleted
• https://ubuntu.com/security/CVE-2022-46874 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-5824-1 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-46881 · Vendor Advisory
• https://osv.dev/vulnerability/USN-5824-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-23598 · Vendor Advisory