CVE-2023-29535
Summary
| CVE | CVE-2023-29535 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2023-06-02 17:15:00 UTC |
| Updated | 2023-06-09 03:57:00 UTC |
| Description | Following a Garbage Collector compaction, weak maps may have been accessed before they were correctly traced. This resulted in memory corruption and a potentially exploitable crash. This vulnerability affects Firefox < 112, Focus for Android < 112, Firefox ESR < 102.10, Firefox for Android < 112, and Thunderbird < 102.10. |
Risk And Classification
Problem Types: NVD-CWE-noinfo
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Mozilla | Firefox | All | All | All | All |
| Application | Mozilla | Firefox | All | All | All | All |
| Application | Mozilla | Firefox Esr | All | All | All | All |
| Application | Mozilla | Focus | All | All | All | All |
| Application | Mozilla | Thunderbird | All | All | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| Security Vulnerabilities fixed in Firefox 112, Firefox for Android 112, Focus for Android 112 — Mozilla | MISC | www.mozilla.org | |
| Access Denied | MISC | bugzilla.mozilla.org | |
| Security Vulnerabilities fixed in Firefox ESR 102.10 — Mozilla | MISC | www.mozilla.org | |
| Security Vulnerabilities fixed in Thunderbird 102.10 — Mozilla | MISC | www.mozilla.org | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
Legacy QID Mappings
- 160548 Oracle Enterprise Linux Security Update for firefox (ELSA-2023-1787)
- 160549 Oracle Enterprise Linux Security Update for firefox (ELSA-2023-1786)
- 160550 Oracle Enterprise Linux Security Update for thunderbird (ELSA-2023-1802)
- 160552 Oracle Enterprise Linux Security Update for thunderbird (ELSA-2023-1806)
- 160553 Oracle Enterprise Linux Security Update for firefox (ELSA-2023-1791)
- 160555 Oracle Enterprise Linux Security Update for thunderbird (ELSA-2023-1809)
- 181732 Debian Security Update for firefox-esr (DLA 3391-1)
- 181733 Debian Security Update for firefox-esr (DSA 5385-1)
- 181749 Debian Security Update for thunderbird (DSA 5392-1)
- 181752 Debian Security Update for thunderbird (DLA 3400-1)
- 183311 Debian Security Update for firefox-esrthunderbird (CVE-2023-29535)
- 199282 Ubuntu Security Notification for Firefox Vulnerabilities (USN-6010-1)
- 199283 Ubuntu Security Notification for Thunderbird Vulnerabilities (USN-6015-1)
- 199378 Ubuntu Security Notification for SpiderMonkey Vulnerabilities (USN-6120-1)
- 241344 Red Hat Update for firefox (RHSA-2023:1785)
- 241345 Red Hat Update for firefox (RHSA-2023:1787)
- 241346 Red Hat Update for firefox (RHSA-2023:1791)
- 241347 Red Hat Update for firefox (RHSA-2023:1788)
- 241348 Red Hat Update for firefox (RHSA-2023:1790)
- 241349 Red Hat Update for firefox (RHSA-2023:1786)
- 241350 Red Hat Update for thunderbird (RHSA-2023:1802)
- 241351 Red Hat Update for thunderbird (RHSA-2023:1811)
- 241352 Red Hat Update for thunderbird (RHSA-2023:1810)
- 241353 Red Hat Update for thunderbird (RHSA-2023:1804)
- 241354 Red Hat Update for thunderbird (RHSA-2023:1806)
- 241355 Red Hat Update for thunderbird (RHSA-2023:1809)
- 241621 Red Hat Update for thunderbird (RHSA-2023:1803)
- 241638 Red Hat Update for firefox (RHSA-2023:1789)
- 241645 Red Hat Update for thunderbird (RHSA-2023:1805)
- 241676 Red Hat Update for firefox (RHSA-2023:1792)
- 257234 CentOS Security Update for firefox (CESA-2023:1791)
- 257235 CentOS Security Update for thunderbird (CESA-2023:1806)
- 354912 Amazon Linux Security Advisory for thunderbird : ALAS2-2023-2028
- 356173 Amazon Linux Security Advisory for firefox : ALASFIREFOX-2023-006
- 378383 Mozilla Firefox Multiple Vulnerabilities (MFSA2023-13)
- 378384 Mozilla Firefox ESR Multiple Vulnerabilities (MFSA2023-14)
- 378387 Mozilla Thunderbird Multiple Vulnerabilities (MFSA2023-15)
- 503446 Alpine Linux Security Update for firefox-esr
- 506054 Alpine Linux Security Update for firefox-esr
- 630894 For ios Vulnerability CVE-2023-29535
- 710735 Gentoo Linux Mozilla Thunderbird Multiple Vulnerabilities (GLSA 202305-36)
- 710739 Gentoo Linux Mozilla Firefox Multiple Vulnerabilities (GLSA 202305-35)
- 753906 SUSE Enterprise Linux Security Update for MozillaFirefox (SUSE-SU-2023:1819-1)
- 753907 SUSE Enterprise Linux Security Update for MozillaFirefox (SUSE-SU-2023:1817-1)
- 753909 SUSE Enterprise Linux Security Update for MozillaFirefox (SUSE-SU-2023:1855-1)
- 940980 AlmaLinux Security Update for firefox (ALSA-2023:1787)
- 940981 AlmaLinux Security Update for thunderbird (ALSA-2023:1802)
- 940986 AlmaLinux Security Update for thunderbird (ALSA-2023:1809)
- 940989 AlmaLinux Security Update for firefox (ALSA-2023:1786)
- 960919 Rocky Linux Security Update for thunderbird (RLSA-2023:1809)
- 960920 Rocky Linux Security Update for thunderbird (RLSA-2023:1802)