Vulnerabilidades do Mozilla Focus for Android

🔔 Criar alerta RSS Verificador de versão

CVEs publicadas que afetam Mozilla Focus for Android: 5 registro(s), com versões afetadas e correções.

CVE-2023-29550 Alta · 8.8 02/06/2023

Mozilla developers Randell Jesup, Andrew Osmond, Sebastian Hengst, Andrew McCreight, and the...

Memory safety bugs present in Firefox 111 and Firefox ESR 102.9. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 112, Focus for Android < 112, Firefox ESR < 102.10, Firefox for Android < 112, and Thunderbird < 102.10.

CVE-2023-29548 Média · 6.5 02/06/2023

A wrong lowering instruction in the ARM64 Ion compiler resulted in a wrong optimization result....

A wrong lowering instruction in the ARM64 Ion compiler resulted in a wrong optimization result. This vulnerability affects Firefox < 112, Focus for Android < 112, Firefox ESR < 102.10, Firefox for Android < 112, and Thunderbird < 102.10.

CVE-2023-29535 Média · 6.5 02/06/2023

Following a Garbage Collector compaction, weak maps may have been accessed before they were...

Following a Garbage Collector compaction, weak maps may have been accessed before they were correctly traced. This resulted in memory corruption and a potentially exploitable crash. This vulnerability affects Firefox < 112, Focus for Android < 112, Firefox ESR < 102.10, Firefox for Android < 112, and Thunderbird < 102.10.

CVE-2023-29539 Alta · 8.8 CWE-476 02/06/2023

When handling the filename directive in the Content-Disposition header, the filename would be...

When handling the filename directive in the Content-Disposition header, the filename would be truncated if the filename contained a NULL character. This could have led to reflected file download attacks potentially tricking users to install malware. This vulnerability affects Firefox < 112, Focus for Android < 112, Firefox ESR < 102.10, Firefox for Android < 112, and Thunderbird < 102.10.

CVE-2023-29536 Alta · 8.8 CWE-416 02/06/2023

An attacker could cause the memory manager to incorrectly free a pointer that addresses attacker...

An attacker could cause the memory manager to incorrectly free a pointer that addresses attacker-controlled memory, resulting in an assertion, memory corruption, or a potentially exploitable crash. This vulnerability affects Firefox < 112, Focus for Android < 112, Firefox ESR < 102.10, Firefox for Android < 112, and Thunderbird < 102.10.