PT-2023-9058 · Mozilla+4 · Firefox+4
Sonakkbi
·
Published
2023-08-02
·
Updated
2025-03-14
·
CVE-2023-5170
CVSS v2.0
7.8
High
| Vector | AV:N/AC:L/Au:N/C:C/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
Firefox versions prior to 118
Description
The issue is related to a memory leak in the canvas rendering process. A compromised content process could cause a surface to change unexpectedly, leading to a memory leak of a privileged process. This could potentially be used to effect a sandbox escape if the correct data was leaked. The vulnerability is associated with incorrect memory release before removing the last reference.
Recommendations
For versions prior to 118, update to version 118 or later to resolve the issue. As a temporary workaround, consider restricting access to canvas rendering functionality until a patch is available.
Fix
Memory Leak
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Alt Linux
Astra Linux
Firefox
Linuxmint
Ubuntu