MFSA2023-09 Firefox: Security Vulnerabilities fixed in Firefox 111 (CVE-2023-28162)

MFSA2023-09 Firefox: Security Vulnerabilities fixed in Firefox 111 (CVE-2023-28162)

Severity

9

CVSS

(AV:N/AC:M/Au:N/C:C/I:C/A:C)

Published

03/14/2023

Created

03/15/2023

Added

03/15/2023

Modified

01/28/2025

Description

While implementing AudioWorklets, some code may have casted one type to another, invalid, dynamic type. This could have led to a potentially exploitable crash. This vulnerability affects Firefox < 111, Firefox ESR < 102.9, and Thunderbird < 102.9.

Solution(s)

• mozilla-firefox-upgrade-111_0

References

• https://attackerkb.com/topics/cve-2023-28162
• CVE - 2023-28162
• http://www.mozilla.org/security/announce/2023/mfsa2023-09.html