CVE-2023-29544CWE-400denial-of-service

CVE-2023-29544

Medium · published June 2, 2023

CVSS v3.1

6.5

EPSS

Percentile

38.2

In the wild

Unconfirmed

What it is

If multiple instances of resource exhaustion occurred at the incorrect time, the garbage collector could have caused memory corruption and a potentially exploitable crash. This vulnerability affects Firefox for Android < 112, Firefox < 112, and Focus for Android < 112.

The record

Technical detail

CVSS v3.1: 6.5 · MEDIUM
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
CVSS v4.0: Not supplied
EPSS: 0.00451 · 38.2th percentile
Weakness: CWE-400 · Uncontrolled Resource Consumption
Published: 2023-06-02T21:15Z

Affected products (3)

Product	Versions	Fixed in
mozilla/firefox	< 112.0	112.0
mozilla/firefox_mobile	< 112.0	112.0
mozilla/focus	< 112.0	112.0

References (4)

https://bugzilla.mozilla.org/show_bug.cgi?id=1818781 · [email protected]https://www.mozilla.org/security/advisories/mfsa2023-13/ · [email protected]https://bugzilla.mozilla.org/show_bug.cgi?id=1818781 · af854a3a-2127-422b-91ae-364da2661108 https://www.mozilla.org/security/advisories/mfsa2023-13/ · af854a3a-2127-422b-91ae-364da2661108

EPSS history

Timeline

02 JUN 00:00Z
If multiple instances of resource exhaustion occurred at the incorrect time, the garbage collector could have caused memory corruption and a potentially…
cvelistv5