๐Ÿ” CVE Alert

CVE-2023-25738

MEDIUM 6.5
CVSS Score
6.5
EPSS Score
0.0%
EPSS Percentile
0th

Members of the <code>DEVMODEW</code> struct set by the printer device driver weren't being validated and could have resulted in invalid values which in turn would cause the browser to attempt out of bounds access to related variables.<br>*This bug only affects Firefox on Windows. Other operating systems are unaffected.*. This vulnerability affects Firefox < 110, Thunderbird < 102.8, and Firefox ESR < 102.8.

Vendor mozilla
Product firefox
Ecosystems
Industries
Technology
Published Jun 2, 2023
Last Updated Jan 9, 2025
Stay Ahead of the Next One

Get instant alerts for mozilla firefox

Be the first to know when new medium vulnerabilities affecting mozilla firefox are published โ€” delivered to Slack, Telegram or Discord.

Get Free Alerts โ†’ Free ยท No credit card ยท 60 sec setup

Affected Versions

Mozilla / Firefox
unspecified < 110
Mozilla / Thunderbird
unspecified < 102.8
Mozilla / Firefox ESR
unspecified < 102.8

References

NVD โ†— CVE.org โ†— EPSS Data โ†—
mozilla.org: https://www.mozilla.org/security/advisories/mfsa2023-06/ mozilla.org: https://www.mozilla.org/security/advisories/mfsa2023-05/ mozilla.org: https://www.mozilla.org/security/advisories/mfsa2023-07/ bugzilla.mozilla.org: https://bugzilla.mozilla.org/show_bug.cgi?id=1811852