CVE-2023-29544 — Uncontrolled Resource Consumption in Mozilla Firefox
Severity
6.5MEDIUMNVD
OSV4.3
EPSS
0.3%
top 50.47%
CISA KEV
Not in KEV
Exploit
No known exploits
Timeline
PublishedJun 2
Latest updateJun 13
Description
If multiple instances of resource exhaustion occurred at the incorrect time, the garbage collector could have caused memory corruption and a potentially exploitable crash. This vulnerability affects Firefox for Android < 112, Firefox < 112, and Focus for Android < 112.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:HExploitability: 2.8 | Impact: 3.6
Affected Packages6 packages
🔴Vulnerability Details
6CVEList▶
CVE-2023-29544: If multiple instances of resource exhaustion occurred at the incorrect time, the garbage collector could have caused memory corruption and a potential↗2023-06-02
GHSA▶
GHSA-h5xr-379w-chrw: If multiple instances of resource exhaustion occurred at the incorrect time, the garbage collector could have caused memory corruption and a potential↗2023-06-02
OSV▶
CVE-2023-29544: If multiple instances of resource exhaustion occurred at the incorrect time, the garbage collector could have caused memory corruption and a potential↗2023-04-12
📋Vendor Advisories
4Microsoft▶
If multiple instances of resource exhaustion occurred at the incorrect time, the garbage collector could have caused memory corruption and a potentially exploitable crash. This vulnerability affects F↗2023-06-13
Debian▶
CVE-2023-29544: firefox - If multiple instances of resource exhaustion occurred at the incorrect time, the...↗2023