CVE-2023-4050

In some cases, an untrusted input stream was copied to a stack buffer without checking its size

published August 1, 2023

CVSS
—
EPSS
13%
Percentile
96.2
In the wild
Unconfirmed
What it is

In some cases, an untrusted input stream was copied to a stack buffer without checking its size. This resulted in a potentially exploitable crash which could have led to a sandbox escape. This vulnerability affects Firefox < 116, Firefox ESR < 102.14, and Firefox ESR < 115.1.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.12584 · 96.2th percentile
Published
2023-08-01T14:58Z
EPSS history
Timeline
  • 01 AUG 14:58Z
    In some cases, an untrusted input stream was copied to a stack buffer without checking its size
    cvelistv5