CVE-2023-25747
published 2023-06-19CVE-2023-25747: A potential use-after-free in libaudio was fixed by disabling the AAudio backend when running on Android API below version 30. *This bug only affects Firefox…
PriorityP338high7.5CVSS 3.1
AVNACLPRNUINSUCNINAH
EPSS
0.60%
44.9th percentile
A potential use-after-free in libaudio was fixed by disabling the AAudio backend when running on Android API below version 30.
*This bug only affects Firefox for Android. Other versions of Firefox are unaffected.* This vulnerability affects Firefox for Android < 110.1.0.
Affected
4 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | firefox | — | — |
| mozilla | firefox | < 110.1 | 110.1 |
| mozilla | firefox | — | — |
| mozilla | firefox_for_android | >= unspecified < 110.1.0 | 110.1.0 |
CVSS provenance
nvdv3.17.5HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
vendor_debian7.5LOW
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Debian
CVE-2023-25747: firefox - A potential use-after-free in libaudio was fixed by disabling the AAudio backend...
vendor_debian·2023·CVSS 7.5
CVE-2023-25747 [HIGH] CVE-2023-25747: firefox - A potential use-after-free in libaudio was fixed by disabling the AAudio backend...
A potential use-after-free in libaudio was fixed by disabling the AAudio backend when running on Android API below version 30. *This bug only affects Firefox for Android. Other versions of Firefox are unaffected.* This vulnerability affects Firefox for Android < 110.1.0.
Scope: local
sid: resolved
Mozilla
Mozilla Foundation Security Advisory 2023-08: CVE-2023-25747
vendor_mozilla·CVSS 7.5
CVE-2023-25747 [HIGH] Mozilla Foundation Security Advisory 2023-08: CVE-2023-25747
Mozilla Foundation Security Advisory 2023-08
CVE: CVE-2023-25747
Product: Firefox for Android
Impact: high
Fixed in: Firefox for Android 110.1
GHSA
GHSA-q7rv-ch5x-wprg: A potential use-after-free in libaudio was fixed by disabling the AAudio backend when running on Android API below version 30
ghsa_unreviewed·2023-06-19
CVE-2023-25747 [HIGH] CWE-416 GHSA-q7rv-ch5x-wprg: A potential use-after-free in libaudio was fixed by disabling the AAudio backend when running on Android API below version 30
A potential use-after-free in libaudio was fixed by disabling the AAudio backend when running on Android API below version 30.
*This bug only affects Firefox for Android. Other versions of Firefox are unaffected.* This vulnerability affects Firefox for Android < 110.1.0.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2023-06-19
Published