CVE-2022-34481
published 2022-12-22CVE-2022-34481: In the nsTArray_Impl::ReplaceElementsAt() function, an integer overflow could have occurred when the number of elements to replace was too large for the…
PriorityP339high8.8CVSS 3.1
AVNACLPRNUIRSUCHIHAH
EPSS
0.78%
51.3th percentile
In the nsTArray_Impl::ReplaceElementsAt() function, an integer overflow could have occurred when the number of elements to replace was too large for the container. This vulnerability affects Firefox < 102, Firefox ESR < 91.11, Thunderbird < 102, and Thunderbird < 91.11.
Affected
20 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | firefox | < firefox 102.0-1 (sid) | firefox 102.0-1 (sid) |
| debian | firefox-esr | < firefox 102.0-1 (sid) | firefox 102.0-1 (sid) |
| debian | thunderbird | < firefox 102.0-1 (sid) | firefox 102.0-1 (sid) |
| mozilla | firefox | < 102.0 | 102.0 |
| mozilla | firefox | — | — |
| mozilla | firefox | >= 0 < 102.0+build2-0ubuntu0.18.04.1 | 102.0+build2-0ubuntu0.18.04.1 |
| mozilla | firefox | >= 0 < 102.0+build2-0ubuntu0.20.04.1 | 102.0+build2-0ubuntu0.20.04.1 |
| mozilla | firefox | >= unspecified < 102 | 102 |
| mozilla | firefox_esr | < 91.11 | 91.11 |
| mozilla | firefox_esr | >= unspecified < 91.11 | 91.11 |
| mozilla | thunderbird | < 91.11 | 91.11 |
| mozilla | thunderbird | >= 0 < 1:91.11.0-1~deb11u1 | 1:91.11.0-1~deb11u1 |
| mozilla | thunderbird | >= 0 < 1:91.11.0-1 | 1:91.11.0-1 |
| mozilla | thunderbird | >= 0 < 1:91.11.0-1 | 1:91.11.0-1 |
| mozilla | thunderbird | >= 0 < 1:91.11.0-1 | 1:91.11.0-1 |
| mozilla | thunderbird | >= 0 < 1:91.11.0+build2-0ubuntu0.18.04.1 | 1:91.11.0+build2-0ubuntu0.18.04.1 |
| mozilla | thunderbird | >= 0 < 1:91.11.0+build2-0ubuntu0.20.04.1 | 1:91.11.0+build2-0ubuntu0.20.04.1 |
| mozilla | thunderbird | >= 0 < 1:91.11.0+build2-0ubuntu0.22.04.1 | 1:91.11.0+build2-0ubuntu0.22.04.1 |
| mozilla | thunderbird | >= unspecified < 102 | 102 |
| mozilla | thunderbird | >= unspecified < 91.11 | 91.11 |
CVSS provenance
nvdv3.18.8HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
osv8.8HIGH
vendor_debian8.8HIGH
vendor_redhat8.8HIGH
vendor_ubuntu8.8HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Ubuntu
Thunderbird vulnerabilities
vendor_ubuntu·2022-07-14·CVSS 6.5
CVE-2022-34468 [MEDIUM] Thunderbird vulnerabilities
Title: Thunderbird vulnerabilities
Summary: Several security issues were fixed in Thunderbird.
Multiple security issues were discovered in Thunderbird. If a user were
tricked into opening a specially crafted website in a browsing context, an
attacker could potentially exploit these to cause a denial of service,
obtain sensitive information, spoof the UI, bypass CSP restrictions, or
execute arbitrary code. (CVE-2022-2200, CVE-2022-31736, CVE-2022-31737,
CVE-2022-31738, CVE-2022-31740, CVE-2022-31741, CVE-2022-31742,
CVE-2022-31744, CVE-2022-31747, CVE-2022-34468, CVE-2022-34470,
CVE-2022-34479, CVE-2022-34481, CVE-2022-34484)
It was discovered that an unavailable PAC file caused OCSP requests to
be blocked, resulting in incorrect error pages being displayed.
(CVE-2022-34472)
It was disc
Ubuntu
Firefox vulnerabilities
vendor_ubuntu·2022-07-05·CVSS 8.8
CVE-2022-34471 [HIGH] Firefox vulnerabilities
Title: Firefox vulnerabilities
Summary: Firefox could be made to crash or run programs as your login if it
opened a malicious website.
Multiple security issues were discovered in Firefox. If a user were
tricked into opening a specially crafted website, an attacker could
potentially exploit these to cause a denial of service, spoof the
browser UI, bypass CSP restrictions, bypass sandboxed iframe restrictions,
obtain sensitive information, bypass the HTML sanitizer, or execute
arbitrary code. (CVE-2022-2200, CVE-2022-34468, CVE-2022-34470,
CVE-2022-34473, CVE-2022-34474, CVE-2022-34475, CVE-2022-34476,
CVE-2022-34477, CVE-2022-34479, CVE-2022-34480, CVE-2022-34481,
CVE-2022-34484, CVE-2022-34485)
It was discovered that Firefox could be made to save an image with an
executable extension in
Red Hat
Mozilla: Potential integer overflow in ReplaceElementsAt
vendor_redhat·2022-06-28·CVSS 8.8
CVE-2022-34481 [HIGH] CWE-190 Mozilla: Potential integer overflow in ReplaceElementsAt
Mozilla: Potential integer overflow in ReplaceElementsAt
In the nsTArray_Impl::ReplaceElementsAt() function, an integer overflow could have occurred when the number of elements to replace was too large for the container. This vulnerability affects Firefox < 102, Firefox ESR < 91.11, Thunderbird < 102, and Thunderbird < 91.11.
The Mozilla Foundation Security Advisory describes this flaw as:
In the `nsTArray_Impl::ReplaceElementsAt()` function, where an integer overflow could occur when the number of elements to replace was too large for the container.
Statement: Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.
Package: firefox (Red Hat Enterprise Linux 6) - Out of support scope
Package: thunderbird (Red Hat Enterprise L
Debian
CVE-2022-34481: firefox - In the <code>nsTArray_Impl::ReplaceElementsAt()</code> function, an integer over...
vendor_debian·2022·CVSS 8.8
CVE-2022-34481 [HIGH] CVE-2022-34481: firefox - In the <code>nsTArray_Impl::ReplaceElementsAt()</code> function, an integer over...
In the nsTArray_Impl::ReplaceElementsAt() function, an integer overflow could have occurred when the number of elements to replace was too large for the container. This vulnerability affects Firefox < 102, Firefox ESR < 91.11, Thunderbird < 102, and Thunderbird < 91.11.
Scope: local
sid: resolved (fixed in 102.0-1)
Mozilla
Mozilla Foundation Security Advisory 2022-26: CVE-2022-34481
vendor_mozilla·CVSS 8.8
CVE-2022-34481 [HIGH] Mozilla Foundation Security Advisory 2022-26: CVE-2022-34481
Mozilla Foundation Security Advisory 2022-26
CVE: CVE-2022-34481
Product: Thunderbird
Impact: high
Fixed in: Thunderbird 102
Thunderbird 91.11
Mozilla
Mozilla Foundation Security Advisory 2022-25: CVE-2022-34481
vendor_mozilla·CVSS 8.8
CVE-2022-34481 [HIGH] Mozilla Foundation Security Advisory 2022-25: CVE-2022-34481
Mozilla Foundation Security Advisory 2022-25
CVE: CVE-2022-34481
Product: Firefox ESR
Impact: high
Fixed in: Firefox ESR 91.11
Mozilla
Mozilla Foundation Security Advisory 2022-24: CVE-2022-34481
vendor_mozilla·CVSS 8.8
CVE-2022-34481 [HIGH] Mozilla Foundation Security Advisory 2022-24: CVE-2022-34481
Mozilla Foundation Security Advisory 2022-24
CVE: CVE-2022-34481
Product: Firefox
Impact: moderate
Fixed in: Firefox 102
VulDB
Mozilla Firefox up to 101 ReplaceElementsAt integer overflow (Bug 1497246 / EUVD-2022-37436)
vuldb·2026-06-13·CVSS 8.8
CVE-2022-34481 [HIGH] Mozilla Firefox up to 101 ReplaceElementsAt integer overflow (Bug 1497246 / EUVD-2022-37436)
A vulnerability, which was classified as critical, was found in Mozilla Firefox up to 101. The affected element is the function nsTArray_Impl::ReplaceElementsAt. Executing a manipulation can lead to integer overflow.
The identification of this vulnerability is CVE-2022-34481. The attack may be launched remotely. There is no exploit available.
You should upgrade the affected component.
VulDB
Mozilla Thunderbird up to 91.10/101 ReplaceElementsAt integer overflow (Bug 1497246 / EUVD-2022-37436)
vuldb·2026-06-13·CVSS 8.8
CVE-2022-34481 [HIGH] Mozilla Thunderbird up to 91.10/101 ReplaceElementsAt integer overflow (Bug 1497246 / EUVD-2022-37436)
A vulnerability was found in Mozilla Thunderbird up to 91.10/101. It has been classified as critical. Affected by this issue is the function nsTArray_Impl::ReplaceElementsAt. Performing a manipulation results in integer overflow.
This vulnerability is identified as CVE-2022-34481. The attack can be initiated remotely. There is not any exploit available.
Upgrading the affected component is recommended.
GHSA
GHSA-f82m-4qrp-29gx: In the nsTArray_Impl::ReplaceElementsAt() function, an integer overflow could have occurred when the number of elements to replace was too large for t
ghsa_unreviewed·2022-12-22
CVE-2022-34481 [HIGH] CWE-190 GHSA-f82m-4qrp-29gx: In the nsTArray_Impl::ReplaceElementsAt() function, an integer overflow could have occurred when the number of elements to replace was too large for t
In the nsTArray_Impl::ReplaceElementsAt() function, an integer overflow could have occurred when the number of elements to replace was too large for the container. This vulnerability affects Firefox < 102, Firefox ESR < 91.11, Thunderbird < 102, and Thunderbird < 91.11.
OSV
CVE-2022-34481: In the nsTArray_Impl::ReplaceElementsAt() function, an integer overflow could have occurred when the number of elements to replace was too large for t
osv·2022-12-22·CVSS 8.8
CVE-2022-34481 [HIGH] CVE-2022-34481: In the nsTArray_Impl::ReplaceElementsAt() function, an integer overflow could have occurred when the number of elements to replace was too large for t
In the nsTArray_Impl::ReplaceElementsAt() function, an integer overflow could have occurred when the number of elements to replace was too large for the container. This vulnerability affects Firefox < 102, Firefox ESR < 91.11, Thunderbird < 102, and Thunderbird < 91.11.
OSV
thunderbird vulnerabilities
osv·2022-07-14·CVSS 6.5
CVE-2022-2200 [MEDIUM] thunderbird vulnerabilities
thunderbird vulnerabilities
Multiple security issues were discovered in Thunderbird. If a user were
tricked into opening a specially crafted website in a browsing context, an
attacker could potentially exploit these to cause a denial of service,
obtain sensitive information, spoof the UI, bypass CSP restrictions, or
execute arbitrary code. (CVE-2022-2200, CVE-2022-31736, CVE-2022-31737,
CVE-2022-31738, CVE-2022-31740, CVE-2022-31741, CVE-2022-31742,
CVE-2022-31744, CVE-2022-31747, CVE-2022-34468, CVE-2022-34470,
CVE-2022-34479, CVE-2022-34481, CVE-2022-34484)
It was discovered that an unavailable PAC file caused OCSP requests to
be blocked, resulting in incorrect error pages being displayed.
(CVE-2022-34472)
It was discovered that the Braille space character could be used to
cause Thund
OSV
firefox vulnerabilities
osv·2022-07-05·CVSS 8.8
CVE-2022-2200 [HIGH] firefox vulnerabilities
firefox vulnerabilities
Multiple security issues were discovered in Firefox. If a user were
tricked into opening a specially crafted website, an attacker could
potentially exploit these to cause a denial of service, spoof the
browser UI, bypass CSP restrictions, bypass sandboxed iframe restrictions,
obtain sensitive information, bypass the HTML sanitizer, or execute
arbitrary code. (CVE-2022-2200, CVE-2022-34468, CVE-2022-34470,
CVE-2022-34473, CVE-2022-34474, CVE-2022-34475, CVE-2022-34476,
CVE-2022-34477, CVE-2022-34479, CVE-2022-34480, CVE-2022-34481,
CVE-2022-34484, CVE-2022-34485)
It was discovered that Firefox could be made to save an image with an
executable extension in the filename when dragging and dropping an image
in some circumstances. If a user were tricked into dragging an
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
https://bugzilla.mozilla.org/show_bug.cgi?id=1497246https://www.mozilla.org/security/advisories/mfsa2022-24/https://www.mozilla.org/security/advisories/mfsa2022-25/https://www.mozilla.org/security/advisories/mfsa2022-26/https://bugzilla.mozilla.org/show_bug.cgi?id=1497246https://www.mozilla.org/security/advisories/mfsa2022-24/https://www.mozilla.org/security/advisories/mfsa2022-25/https://www.mozilla.org/security/advisories/mfsa2022-26/
2022-12-22
Published