CVE-2023-6866

EPSS 0.93%
Published 19.12.2023 14:15:07
Last modified 21.11.2024 08:44:43
Source security@mozilla.org
Teams watchlist Login
Open Login

TypedArrays can be fallible and lacked proper exception handling. This could lead to abuse in other APIs which expect TypedArrays to always succeed. This vulnerability affects Firefox < 121.

Affected products Warnungen 0 Metrics 3 CWE 1 References 6

Data is provided by the National Vulnerability Database (NVD)

Mozilla ≫ Firefox Version < 121.0

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	0.93%	0.753

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	8.8	2.8	5.9	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
134c704f-9b21-4f2e-91b3-4a467353bcc0	8.8	2.8	5.9	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE-755 Improper Handling of Exceptional Conditions

The product does not handle or incorrectly handles an exceptional condition.

https://security.gentoo.org/glsa/202401-10

Third Party Advisory

https://www.mozilla.org/security/advisories/mfsa2023-56/

Vendor Advisory

https://bugzilla.mozilla.org/show_bug.cgi?id=1849037

Issue Tracking

Permissions Required

https://nvd.nist.gov/vuln/detail/CVE-2023-6866

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2023-6866

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2023-6866

EUVD