Skip to content
CVE PROGRAM SOURCE RECORD9.8 Critical

CVE-2023-29531

An attacker could have caused an out of bounds memory access using WebGL APIs, leading to memory corruption and a potentially exploitable crash.

Description

An attacker could have caused an out of bounds memory access using WebGL APIs, leading to memory corruption and a potentially exploitable crash. *This bug only affects Firefox and Thunderbird for macOS. Other operating systems are unaffected.* This vulnerability affects Firefox < 112, Firefox ESR < 102.10, and Thunderbird < 102.10.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Mozilla Firefox

Default version status: unaffected

  • unspecified to < 112affected

Mozilla Firefox ESR

Default version status: unaffected

  • unspecified to < 102.10affected

Mozilla Thunderbird

Default version status: unaffected

  • unspecified to < 102.10affected

References