CVE-2023-6866

EPSS 0.93%
Veröffentlicht 19.12.2023 14:15:07
Zuletzt bearbeitet 21.11.2024 08:44:43
Quelle security@mozilla.org
CVE-Watchlists
Login
Unerledigt
Login

TypedArrays can be fallible and lacked proper exception handling. This could lead to abuse in other APIs which expect TypedArrays to always succeed. This vulnerability affects Firefox < 121.

Betroffene Produkte Warnungen 0 Metriken 3 CWE 1 Referenzen 6

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Mozilla ≫ Firefox Version < 121.0

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.93%	0.754

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	8.8	2.8	5.9	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
134c704f-9b21-4f2e-91b3-4a467353bcc0	8.8	2.8	5.9	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE-755 Improper Handling of Exceptional Conditions

The product does not handle or incorrectly handles an exceptional condition.

https://security.gentoo.org/glsa/202401-10

Third Party Advisory

https://www.mozilla.org/security/advisories/mfsa2023-56/

Vendor Advisory

https://bugzilla.mozilla.org/show_bug.cgi?id=1849037

Issue Tracking

Permissions Required

https://nvd.nist.gov/vuln/detail/CVE-2023-6866

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2023-6866

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2023-6866

EUVD