Log in Start free

Vulnerability · Published Dec 22, 2022 · Assigned by mozilla

CVE-2022-22751

High 8.8

In plain English

A high-severity out-of-bounds write in Firefox from Mozilla. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.9% (higher than 60% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)8.8High
Exploit odds (30 days)0.9%top 39.6% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

Mozilla developers Calixte Denizet, Kershaw Chang, Christian Holler, Jason Kratzer, Gabriele Svelto, Tyson Smith, Simon Giesecke, and Steve Fink reported memory safety bugs present in Firefox 95 and Firefox ESR 91.4. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox ESR < 91.5, Firefox < 96, and Thunderbird < 91.5.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
AlmaLinux:8firefox91.5.0-1.el8_5.almaALSA-2022:0130
AlmaLinux:8thunderbird91.5.0-1.el8_5.almaALSA-2022:0129
AlmaLinux:8thunderbird91.5.0-1.el8_5.alma.plusALSA-2022:0129
Alpine:v3.20firefox97.0-r0ALPINE-CVE-2022-22751
Alpine:v3.21firefox97.0-r0ALPINE-CVE-2022-22751
Alpine:v3.22firefox97.0-r0ALPINE-CVE-2022-22751
Alpine:v3.23firefox97.0-r0ALPINE-CVE-2022-22751
Alpine:v3.20firefox-esr91.5.0-r0ALPINE-CVE-2022-22751
Alpine:v3.21firefox-esr91.5.0-r0ALPINE-CVE-2022-22751
Alpine:v3.22firefox-esr91.5.0-r0ALPINE-CVE-2022-22751
Alpine:v3.23firefox-esr91.5.0-r0ALPINE-CVE-2022-22751
Alpine:v3.21librewolf97.0-r0ALPINE-CVE-2022-22751
Alpine:v3.22librewolf97.0-r0ALPINE-CVE-2022-22751
Alpine:v3.23librewolf97.0-r0ALPINE-CVE-2022-22751
Alpine:v3.24librewolf97.0-r0ALPINE-CVE-2022-22751
Alpine:v3.20thunderbird91.5.0-r0ALPINE-CVE-2022-22751
Alpine:v3.21thunderbird91.5.0-r0ALPINE-CVE-2022-22751
Alpine:v3.22thunderbird91.5.0-r0ALPINE-CVE-2022-22751
Alpine:v3.23thunderbird91.5.0-r0ALPINE-CVE-2022-22751
Debian:12firefox-esr91.5.0esr-1DEBIAN-CVE-2022-22751
Debian:13firefox-esr91.5.0esr-1DEBIAN-CVE-2022-22751
Debian:14firefox-esr91.5.0esr-1DEBIAN-CVE-2022-22751
Debian:12thunderbird1:91.5.0-1DEBIAN-CVE-2022-22751
Debian:13thunderbird1:91.5.0-1DEBIAN-CVE-2022-22751
Debian:14thunderbird1:91.5.0-1DEBIAN-CVE-2022-22751
Rocky Linux:8firefox0:91.5.0-1.el8_5RLSA-2022:0130
Rocky Linux:8thunderbird0:91.5.0-1.el8_5RLSA-2022:0129
Ubuntu:22.04:LTSfirefox96.0+build2-0ubuntu1UBUNTU-CVE-2022-22751
Ubuntu:22.04:LTSmozjs78no fix listedUBUNTU-CVE-2022-22751
Ubuntu:22.04:LTSthunderbird1:91.5.0+build1-0ubuntu1UBUNTU-CVE-2022-22751

Affected products (as reported)

VendorProductVersions
Mozilla Firefox ESR unspecified – before 91.5
Mozilla Firefox unspecified – before 96
Mozilla Thunderbird unspecified – before 91.5

Weakness: CWE-787 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

References