CVE-2023-6866

TypedArrays can be fallible and lacked proper exception handling

High · published December 19, 2023

CVSS v3.1
8.8
EPSS
1%
Percentile
51.9
In the wild
Unconfirmed
What it is

TypedArrays can be fallible and lacked proper exception handling. This could lead to abuse in other APIs which expect TypedArrays to always succeed. This vulnerability affects Firefox < 121.

The record
Technical detail
CVSS v3.1
8.8 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00681 · 51.9th percentile
Published
2023-12-19T13:38Z
EPSS history
Timeline
  • 19 DEC 13:38Z
    TypedArrays can be fallible and lacked proper exception handling
    cvelistv5