Log in Start free

Vulnerability · Published Dec 22, 2022 · Assigned by mozilla

CVE-2022-46880

Medium 6.5

In plain English

A medium-severity use-after-free in Firefox from Mozilla. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.7% (higher than 53% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)6.5Medium
Exploit odds (30 days)0.7%top 46.8% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

A missing check related to tex units could have led to a use-after-free and potentially exploitable crash.<br />*Note*: This advisory was added on December 13th, 2022 after we better understood the impact of the issue. The fix was included in the original release of Firefox 105. This vulnerability affects Firefox ESR < 102.6, Firefox < 105, and Thunderbird < 102.6.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
AlmaLinux:8firefox102.6.0-1.el8_7.almaALSA-2022:9067
AlmaLinux:9firefox102.6.0-1.el9_1.almaALSA-2022:9065
AlmaLinux:8thunderbird102.6.0-2.el8_7.almaALSA-2022:9074
AlmaLinux:9thunderbird102.6.0-2.el9_1.almaALSA-2022:9080
Alpine:v3.20firefox-esr102.6.0-r0ALPINE-CVE-2022-46880
Alpine:v3.21firefox-esr102.6.0-r0ALPINE-CVE-2022-46880
Alpine:v3.22firefox-esr102.6.0-r0ALPINE-CVE-2022-46880
Alpine:v3.23firefox-esr102.6.0-r0ALPINE-CVE-2022-46880
Debian:12firefox-esr102.6.0esr-1DEBIAN-CVE-2022-46880
Debian:13firefox-esr102.6.0esr-1DEBIAN-CVE-2022-46880
Debian:14firefox-esr102.6.0esr-1DEBIAN-CVE-2022-46880
Debian:12thunderbird1:102.6.0-1DEBIAN-CVE-2022-46880
Debian:13thunderbird1:102.6.0-1DEBIAN-CVE-2022-46880
Debian:14thunderbird1:102.6.0-1DEBIAN-CVE-2022-46880
Rocky Linux:8firefox0:102.6.0-1.el8_7RLSA-2022:9067
Ubuntu:22.04:LTSthunderbird1:102.7.1+build2-0ubuntu0.22.04.1UBUNTU-CVE-2022-46880
Ubuntu:22.04:LTSthunderbird1:102.7.1+build2-0ubuntu0.22.04.1USN-5824-1

Affected products (as reported)

VendorProductVersions
Mozilla Firefox ESR unspecified – before 102.6
Mozilla Firefox unspecified – before 105
Mozilla Thunderbird unspecified – before 102.6

Weakness: CWE-416 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

References