CVE-2022-46884
published 2023-08-24CVE-2022-46884: A potential use-after-free vulnerability existed in SVG Images if the Refresh Driver was destroyed at an inopportune time. This could have lead to memory…
PriorityP339high8.8CVSS 3.1
AVNACLPRNUIRSUCHIHAH
EPSS
0.41%
32.9th percentile
A potential use-after-free vulnerability existed in SVG Images if the Refresh Driver was destroyed at an inopportune time. This could have lead to memory corruption or a potentially exploitable crash.
*Note*: This advisory was added on December 13th, 2022 after discovering it was inadvertently left out of the original advisory. The fix was included in the original release of Firefox 106. This vulnerability affects Firefox < 106.
Affected
4 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | firefox | < firefox 106.0-1 (sid) | firefox 106.0-1 (sid) |
| mozilla | firefox | < 106.0 | 106.0 |
| mozilla | firefox | — | — |
| mozilla | firefox | >= unspecified < 106 | 106 |
CVSS provenance
nvdv3.18.8HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
osv8.8HIGH
vendor_debian8.8HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Debian
CVE-2022-46884: firefox - A potential use-after-free vulnerability existed in SVG Images if the Refresh Dr...
vendor_debian·2022·CVSS 8.8
CVE-2022-46884 [HIGH] CVE-2022-46884: firefox - A potential use-after-free vulnerability existed in SVG Images if the Refresh Dr...
A potential use-after-free vulnerability existed in SVG Images if the Refresh Driver was destroyed at an inopportune time. This could have lead to memory corruption or a potentially exploitable crash. *Note*: This advisory was added on December 13th, 2022 after discovering it was inadvertently left out of the original advisory. The fix was included in the original release of Firefox 106. This vulnerability affects Firefox < 106.
Scope: local
sid: resolved (fixed in 106.0-1)
Mozilla
Mozilla Foundation Security Advisory 2022-44: CVE-2022-46884
vendor_mozilla·CVSS 8.8
CVE-2022-46884 [HIGH] Mozilla Foundation Security Advisory 2022-44: CVE-2022-46884
Mozilla Foundation Security Advisory 2022-44
CVE: CVE-2022-46884
Product: Firefox
Impact: moderate
Fixed in: Firefox 106
GHSA
GHSA-w3h2-4jrj-6mcc: A potential use-after-free vulnerability existed in SVG Images if the Refresh Driver was destroyed at an inopportune time
ghsa_unreviewed·2023-08-24
CVE-2022-46884 [HIGH] CWE-416 GHSA-w3h2-4jrj-6mcc: A potential use-after-free vulnerability existed in SVG Images if the Refresh Driver was destroyed at an inopportune time
A potential use-after-free vulnerability existed in SVG Images if the Refresh Driver was destroyed at an inopportune time. This could have lead to memory corruption or a potentially exploitable crash.
*Note*: This advisory was added on December 13th, 2022 after discovering it was inadvertently left out of the original advisory. The fix was included in the original release of Firefox 106. This vulnerability affects Firefox < 106.
OSV
CVE-2022-46884: A potential use-after-free vulnerability existed in SVG Images if the Refresh Driver was destroyed at an inopportune time
osv·2023-08-24·CVSS 8.8
CVE-2022-46884 [HIGH] CVE-2022-46884: A potential use-after-free vulnerability existed in SVG Images if the Refresh Driver was destroyed at an inopportune time
A potential use-after-free vulnerability existed in SVG Images if the Refresh Driver was destroyed at an inopportune time. This could have lead to memory corruption or a potentially exploitable crash. *Note*: This advisory was added on December 13th, 2022 after discovering it was inadvertently left out of the original advisory. The fix was included in the original release of Firefox 106. This vulnerability affects Firefox < 106.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2023-08-24
Published