Mozilla Focus for Android vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Mozilla Focus for Android: 5 record(s), with affected versions and fixes.
CVE-2023-29550
High · 8.8
Jun 2, 2023
Mozilla developers Randell Jesup, Andrew Osmond, Sebastian Hengst, Andrew McCreight, and the...
Memory safety bugs present in Firefox 111 and Firefox ESR 102.9. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 112, Focus for Android < 112, Firefox ESR < 102.10, Firefox for Android < 112, and Thunderbird < 102.10.
CVE-2023-29548
Medium · 6.5
Jun 2, 2023
A wrong lowering instruction in the ARM64 Ion compiler resulted in a wrong optimization result....
A wrong lowering instruction in the ARM64 Ion compiler resulted in a wrong optimization result. This vulnerability affects Firefox < 112, Focus for Android < 112, Firefox ESR < 102.10, Firefox for Android < 112, and Thunderbird < 102.10.
CVE-2023-29535
Medium · 6.5
Jun 2, 2023
Following a Garbage Collector compaction, weak maps may have been accessed before they were...
Following a Garbage Collector compaction, weak maps may have been accessed before they were correctly traced. This resulted in memory corruption and a potentially exploitable crash. This vulnerability affects Firefox < 112, Focus for Android < 112, Firefox ESR < 102.10, Firefox for Android < 112, and Thunderbird < 102.10.
CVE-2023-29539
High · 8.8
CWE-476 Jun 2, 2023
When handling the filename directive in the Content-Disposition header, the filename would be...
When handling the filename directive in the Content-Disposition header, the filename would be truncated if the filename contained a NULL character. This could have led to reflected file download attacks potentially tricking users to install malware. This vulnerability affects Firefox < 112, Focus for Android < 112, Firefox ESR < 102.10, Firefox for Android < 112, and Thunderbird < 102.10.
CVE-2023-29536
High · 8.8
CWE-416 Jun 2, 2023
An attacker could cause the memory manager to incorrectly free a pointer that addresses attacker...
An attacker could cause the memory manager to incorrectly free a pointer that addresses attacker-controlled memory, resulting in an assertion, memory corruption, or a potentially exploitable crash. This vulnerability affects Firefox < 112, Focus for Android < 112, Firefox ESR < 102.10, Firefox for Android < 112, and Thunderbird < 102.10.