Security Advisory

CVE-2023-5171

6.5
MEDIUM

Vulnerability Description

During Ion compilation, a Garbage Collection could have resulted in a use-after-free condition, allowing an attacker to write two NUL bytes, and cause a potentially exploitable crash. This vulnerability affects Firefox < 118, Firefox ESR < 115.3, and Thunderbird < 115.3.
Published Date September 27, 2023
Official Source NIST NVD Advisory