cbcvebase.
CVE-2023-4050
published 2023-08-01

CVE-2023-4050: In some cases, an untrusted input stream was copied to a stack buffer without checking its size. This resulted in a potentially exploitable crash which could…

PriorityP343high7.5CVSS 3.1
AVNACLPRNUINSUCNINAH
EPSS
13.69%
96.0th percentile
In some cases, an untrusted input stream was copied to a stack buffer without checking its size. This resulted in a potentially exploitable crash which could have led to a sandbox escape. This vulnerability affects Firefox < 116, Firefox ESR < 102.14, and Firefox ESR < 115.1.

Affected

21 ranges
VendorProductVersion rangeFixed in
debiandebian_linux
debiandebian_linux
debianfirefox< firefox 116.0-1 (sid)firefox 116.0-1 (sid)
debianfirefox-esr< firefox 116.0-1 (sid)firefox 116.0-1 (sid)
debianthunderbird< firefox 116.0-1 (sid)firefox 116.0-1 (sid)
mozillafirefox< 116.0116.0
mozillafirefox
mozillafirefox>= 0 < 116.0.2+build1-0ubuntu0.20.04.1116.0.2+build1-0ubuntu0.20.04.1
mozillafirefox>= 0 < 116.0+build2-0ubuntu0.20.04.2116.0+build2-0ubuntu0.20.04.2
mozillafirefox>= 0 < 116.0.3+build2-0ubuntu0.20.04.1116.0.3+build2-0ubuntu0.20.04.1
mozillafirefox>= 102.0 < 102.14102.14
mozillafirefox>= 115.0 < 115.1115.1
mozillafirefox>= unspecified < 116116
mozillafirefox_esr>= unspecified < 102.14102.14
mozillafirefox_esr>= unspecified < 115.1115.1
mozillathunderbird>= 0 < 1:102.14.0-1~deb11u11:102.14.0-1~deb11u1
mozillathunderbird>= 0 < 1:102.14.0-1~deb12u11:102.14.0-1~deb12u1
mozillathunderbird>= 0 < 1:115.1.0-11:115.1.0-1
mozillathunderbird>= 0 < 1:115.1.0-11:115.1.0-1
mozillathunderbird>= 0 < 1:102.15.0+build1-0ubuntu0.20.04.11:102.15.0+build1-0ubuntu0.20.04.1
mozillathunderbird>= 0 < 1:102.15.0+build1-0ubuntu0.22.04.11:102.15.0+build1-0ubuntu0.22.04.1

CVSS provenance

nvdv3.17.5HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
osv7.5HIGH
vendor_debian7.5HIGH
vendor_redhat7.5HIGH
vendor_ubuntu7.5HIGH
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.