PT-2023-3735 · Mozilla+5 · Firefox+5

Andrew Mccreight

·

Published

2023-07-04

·

Updated

2025-03-14

·

CVE-2023-37212

CVSS v2.0

10

High

VectorAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Firefox versions prior to 115
Description The issue is related to memory safety bugs, including evidence of memory corruption, which could potentially be exploited to run arbitrary code with sufficient effort. This is a result of a buffer overflow in memory, allowing a remote attacker to execute arbitrary code.
Recommendations For versions prior to 115, update to version 115 or later to resolve the issue. As a temporary workaround, consider restricting access to sensitive features or modules in Firefox until the update is applied.

Fix

Memory Corruption

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-787

Related Identifiers

ALT-PU-2023-4102
ALT-PU-2023-5754
ALT-PU-2023-6436
ALT-PU-2024-14035
ALT-PU-2024-3614
ALT-PU-2024-4241
BDU:2023-04023
CVE-2023-37212
OESA-2025-1265
OESA-2025-1268
OPENSUSE-SU-2023_2886-1
OPENSUSE-SU-2024:13037-1
OPENSUSE-SU-2024:14572-1
SUSE-SU-2023:2849-1
SUSE-SU-2023:2850-1
SUSE-SU-2023:2886-1
USN-6201-1

Affected Products

Alt Linux
Astra Linux
Firefox
Linuxmint
Suse
Ubuntu