CVE-2023-5170

In canvas rendering, a compromised content process could have caused a surface to change unexpectedly, leading to a memory leak of a privileged process. This memory leak could be used to effect a sandbox escape if the correct data was leaked. This vulnerability affects Firefox < 118.
Configurations

Configuration 1 (hide)

cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*

History

21 Nov 2024, 08:41

Type Values Removed Values Added
New CVE

Information

Published : 2023-09-27 15:19

Updated : 2024-11-21 08:41


NVD link : CVE-2023-5170

Mitre link : CVE-2023-5170

CVE.ORG link : CVE-2023-5170


JSON object : View

Products Affected

mozilla

  • firefox
CWE
CWE-401

Missing Release of Memory after Effective Lifetime