CVE-2023-29544

Summary

If multiple instances of resource exhaustion occurred at the incorrect time, the garbage collector could have caused memory corruption and a potentially exploitable crash. This vulnerability affects Firefox for Android < 112, Firefox < 112, and Focus for Android < 112.

Affected Software

VendorProductVersion RangeStatus
MozillaFirefox for Androidunspecified < 112affected
MozillaFirefoxunspecified < 112affected
MozillaFocus for Androidunspecified < 112affected

Weaknesses

  • Memory Corruption in garbage collector

ADP Enrichment

CVE Program Container

Additional References

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

References