PT-2023-8054 · Mozilla+4 · Firefox+4

Andrew Mccreight + 1 · Published 2023-12-19 · Updated 2025-03-21 · CVE-2023-6873

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 121

Description The issue is related to memory safety bugs, which can lead to memory corruption. With sufficient effort, these bugs could potentially be exploited to run arbitrary code. The estimated number of potentially affected devices and details about real-world incidents are not provided.

Recommendations For versions prior to 121, update to version 121 or later to resolve the issue. As a temporary workaround, consider restricting access to sensitive features or data within the browser until the update is applied.

Exploit

Fix

Memory Corruption

Buffer Overflow

Weakness Enumeration

CWE-787

CWE-119

Related Identifiers

ALT-PU-2023-8231

ALT-PU-2024-13898

ALT-PU-2024-15839

ALT-PU-2024-15840

BDU:2024-00031

CVE-2023-6873

DLA-3698-1

DSA-5582-1

OESA-2025-1322

OESA-2025-1323

OPENSUSE-SU-2024:13531-1

OPENSUSE-SU-2024:14572-1

USN-6562-1

USN-6562-2

Affected Products

Alt Linux

Astra Linux

Firefox

Linuxmint

Ubuntu

References · 1958

• 🔥 https://github.com/mistymntncop/CVE-2023-4863 · Exploit
• 🔥 https://github.com/LOURC0D3/CVE-2024-4367-PoC · Exploit
• 🔥 https://github.com/bjrjk/CVE-2024-29943 · Exploit
• 🔥 https://github.com/s4vvysec/CVE-2024-4367-POC · Exploit
• 🔥 https://github.com/LiveOverflow/webp-CVE-2023-4863 · Exploit
• 🔥 https://github.com/wrv/cve-2023-5217-poc · Exploit
• 🔥 https://github.com/UT-Security/cve-2023-5217-poc · Exploit
• 🔥 https://github.com/Zombie-Kaiser/cve-2024-4367-PoC-fixed · Exploit
• 🔥 https://github.com/spaceraccoon/detect-cve-2024-4367 · Exploit
• 🔥 https://github.com/tdonaworth/Firefox-CVE-2024-9680 · Exploit
• 🔥 https://github.com/bbaranoff/CVE-2023-4863 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2024-5694 · Security Note
• https://osv.dev/vulnerability/OESA-2025-1323 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-6135 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-6873 · Vendor Advisory