NetSight
medium6.5

CVE-2023-25751

Sometimes, when invalidating JIT code while following an iterator, the newly generated code could be overwritten incorrectly.

Impact

Sometimes, when invalidating JIT code while following an iterator, the newly generated code could be overwritten incorrectly. This could lead to a potentially exploitable crash. This vulnerability affects Firefox < 111, Firefox ESR < 102.9, and Thunderbird < 102.9.

Affected products

VendorProductAffected versions
MozillaFirefox
before 111.0
MozillaFirefox Esr
before 102.9
MozillaThunderbird
before 102.9

References