CVE-2022-28285 — Out-of-bounds Read in Mozilla Firefox
Severity
6.5MEDIUMNVD
EPSS
0.3%
top 51.08%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedDec 22
Description
When generating the assembly code for MLoadTypedArrayElementHole, an incorrect AliasSet was used. In conjunction with another vulnerability this could have been used for an out of bounds memory read. This vulnerability affects Thunderbird < 91.8, Firefox < 99, and Firefox ESR < 91.8.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:NExploitability: 2.8 | Impact: 3.6
Affected Packages9 packages
🔴Vulnerability Details
6GHSA▶
GHSA-fmhg-h49x-72gp: When generating the assembly code for MLoadTypedArrayElementHole, an incorrect AliasSet was used↗2022-12-22
OSV▶
CVE-2022-28285: When generating the assembly code for MLoadTypedArrayElementHole, an incorrect AliasSet was used↗2022-12-22
CVEList▶
CVE-2022-28285: When generating the assembly code for MLoadTypedArrayElementHole, an incorrect AliasSet was used↗2022-12-22
📋Vendor Advisories
8Debian▶
CVE-2022-28285: firefox - When generating the assembly code for <code>MLoadTypedArrayElementHole</code>, a...↗2022