CVE-2023-5175

During process shutdown, it was possible that an `ImageBitmap` was created that would later be used after being freed from a different codepath, leading to a…

Critical · published September 27, 2023

CVSS v3.1
9.8
EPSS
1%
Percentile
63.6
In the wild
Unconfirmed
What it is

🚨 A rogue `ImageBitmap` is hanging around just when you thought it was safe! This memory mishap could lead to crashes in Firefox versions below 118. 🔥 Think of it like a restaurant that continues to serve a dish even after the chef accidentally dropped it on the floor. When someone goes to take a bite, they might find a nasty surprise — not quite the delightful experience they expected! If exploited, this vulnerability could lead to a crash, leaving your browsing session abruptly halted. The potential for a simple image to wreak havoc is absolutely devastating, especially for users relying on Firefox for their daily browsing activities. Imagine trying to finish an important task when suddenly, the whole thing just freezes!

Put simply

Think of it like a restaurant that continues to serve a dish even after the chef accidentally dropped it on the floor. When someone goes to take a bite, they might find a nasty surprise — not quite the delightful experience they expected! During the closure of processes, an `ImageBitmap` could be created and misused after being freed by another code path, creating a risky memory situation that could lead to system instability.

What to do

If exploited, this vulnerability could lead to a crash, leaving your browsing session abruptly halted. The potential for a simple image to wreak havoc is absolutely devastating, especially for users relying on Firefox for their daily browsing activities. Imagine trying to finish an important task when suddenly, the whole thing just freezes! Update your Firefox immediately to version 118 or later. This is crucial to ensure you’re not vulnerable to this potentially disruptive glitch. Additionally, keep an eye on your installed extensions, as they might need updates too! You’ve got this! By taking these steps, you'll shore up your defenses and keep cruising safely on the internet! 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01038 · 63.6th percentile
Published
2023-09-27T14:13Z
EPSS history
Timeline
  • 27 SEP 14:13Z
    During process shutdown, it was possible that an `ImageBitmap` was created that would later be used after being freed from a different codepath, leading to a…
    cvelistv5