PT-2023-5271 · Mozilla+4 · Focus For Android+6

Lukas Bernhard · Published 2023-02-10 · Updated 2025-10-31 · CVE-2023-29543

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 112 Firefox for Android versions prior to 112 Focus for Android versions prior to 112

Description The issue is related to a use-after-free of a pointer in a global object's debugger vector, potentially leading to memory corruption. This could allow a remote attacker to access confidential data, compromise its integrity, and cause a denial of service.

Recommendations For Firefox versions prior to 112, update to version 112 or later. For Firefox for Android versions prior to 112, update to version 112 or later. For Focus for Android versions prior to 112, update to version 112 or later.

Fix

Use After Free

Improper Encoding or Escaping of Output

Weakness Enumeration

CWE-416

CWE-116

Related Identifiers

ALT-PU-2023-1621

ALT-PU-2023-1817

ALT-PU-2023-5202

ALT-PU-2023-5754

ALT-PU-2023-6436

ALT-PU-2024-3614

BDU:2023-05892

CVE-2023-29543

OESA-2025-2592

OESA-2025-2593

OPENSUSE-SU-2024:12882-1

OPENSUSE-SU-2024:14572-1

USN-6010-1

USN-6010-2

USN-6010-3

Affected Products

Alt Linux

Astra Linux

Firefox

Firefox For Android

Focus For Android

Linuxmint

Ubuntu

References · 1906

• https://osv.dev/vulnerability/CVE-2023-29543 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-29538 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:14572-1 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2025-2593 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-29551 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:12882-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-29550 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-29543 · Security Note
• https://ubuntu.com/security/CVE-2023-29548 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-29543 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se16-bulletin-20220829SE16 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-29544 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-28161 · Security Note
• https://ubuntu.com/security/CVE-2023-29539 · Vendor Advisory
• https://osv.dev/vulnerability/USN-6010-2 · Vendor Advisory