Not rated
CVE-2023-29537 Multiple race conditions in the font initialization could have led to memory corruption and execution of…
Description
Multiple race conditions in the font initialization could have led to memory corruption and execution of attacker-controlled code. This vulnerability affects Firefox for Android < 112, Firefox < 112, and Focus for Android < 112.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Firefox for Android 112 | earliest → < 112 | 112 |
| Firefox 112 | earliest → < 112 | 112 |
| Focus for Android 112 | earliest → < 112 | 112 |
References
- www.mozilla.org www.mozilla.org
- bugzilla.mozilla.org bugzilla.mozilla.org
- bugzilla.mozilla.org bugzilla.mozilla.org
- bugzilla.mozilla.org bugzilla.mozilla.org
Timeline
- Published
- Last modified
Other CVEs of Firefox for Android
The 33 CVEs of Firefox for Android →
CVE-2024-8897
Under certain conditions, an attacker with the ability to redirect users to a malicious site via an open redirect on a…
6.1
Medium
CVE-2023-29546
When recording the screen while in Private Browsing on Firefox for Android the address bar and keyboard were not hidden,…
6.5
Medium
CVE-2023-29534
Different techniques existed to obscure the fullscreen notification in Firefox and Focus for Android
9.1
Critical
CVE-2023-25747
A potential use-after-free in libaudio was fixed by disabling the AAudio backend when running on Android API below…
7.5
High