PT-2023-5270 · Mozilla+4 · Focus For Android+6

Looben Yang

·

Published

2023-03-20

·

Updated

2025-03-14

·

CVE-2023-29537

CVSS v2.0

7.6

High

VectorAV:N/AC:H/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Firefox versions prior to 112 Firefox for Android versions prior to 112 Focus for Android versions prior to 112
Description The issue is related to multiple race conditions in the font initialization, which could lead to memory corruption and execution of attacker-controlled code. This could allow a remote attacker to access confidential data, compromise its integrity, and cause a denial of service. The vulnerability is associated with concurrent execution using a shared resource with incorrect synchronization.
Recommendations For Firefox versions prior to 112, update to version 112 or later. For Firefox for Android versions prior to 112, update to version 112 or later. For Focus for Android versions prior to 112, update to version 112 or later.

Fix

Race Condition

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-362

Related Identifiers

ALT-PU-2023-1621
ALT-PU-2023-1817
ALT-PU-2023-5202
ALT-PU-2023-5754
ALT-PU-2023-6436
ALT-PU-2024-3614
BDU:2023-05889
CVE-2023-29537
OESA-2025-1265
OESA-2025-1268
OPENSUSE-SU-2024:12882-1
OPENSUSE-SU-2024:14572-1
USN-6010-1
USN-6010-2
USN-6010-3

Affected Products

Alt Linux
Astra Linux
Firefox
Firefox For Android
Focus For Android
Linuxmint
Ubuntu