CVE-2022-46884

A potential use-after-free vulnerability existed in SVG Images if the Refresh Driver was destroyed at an inopportune time

published August 24, 2023

CVSS
—
EPSS
0%
Percentile
40.2
In the wild
Unconfirmed
What it is

A potential use-after-free vulnerability existed in SVG Images if the Refresh Driver was destroyed at an inopportune time. This could have lead to memory corruption or a potentially exploitable crash.

*Note*: This advisory was added on December 13th, 2022 after discovering it was inadvertently left out of the original advisory. The fix was included in the original release of Firefox 106. This vulnerability affects Firefox < 106.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00477 · 40.2th percentile
Published
2023-08-24T16:00Z
EPSS history
Timeline
  • 24 AUG 16:00Z
    A potential use-after-free vulnerability existed in SVG Images if the Refresh Driver was destroyed at an inopportune time
    cvelistv5