What’s Vulnerable › Vulnerabilities

CVE-2023-29551

• Severity: high (CVSS 8.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.5% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2023-06-02 · updated 2026-08-19
• Weakness: CWE-787

Description

Memory safety bugs present in Firefox 111. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox for Android < 112, Firefox < 112, and Focus for Android < 112.

Affected products

• Mozilla Firefox: before 112.0 — fixed in 112.0
• Mozilla Firefox for Android: before 112.0 — fixed in 112.0
• Mozilla Focus: before 112.0 — fixed in 112.0

How to fix

Upgrade to a fixed version: Mozilla Firefox 112.0; Mozilla Firefox for Android 112.0; Mozilla Focus 112.0. Check the vendor advisory for mitigations.

References

• https://bugzilla.mozilla.org/buglist.cgi?bug_id=1763625%2C1814314%2C1815798%2C1815890%2C1819239%2C1819465%2C1819486%2C1819492%2C1819957%2C1820514%2C1820776%2C1821838%2C1822175%2C1823547
• https://www.mozilla.org/security/advisories/mfsa2023-13/
• https://bugzilla.mozilla.org/buglist.cgi?bug_id=1763625%2C1814314%2C1815798%2C1815890%2C1819239%2C1819465%2C1819486%2C1819492%2C1819957%2C1820514%2C1820776%2C1821838%2C1822175%2C1823547
• https://www.mozilla.org/security/advisories/mfsa2023-13/

Get alerted when CVE-2023-29551 or the next vulnerability affects your stack