CVE-2023-29536

An attacker could cause the memory manager to incorrectly free a pointer that addresses attacker-controlled memory, resulting in an assertion, memory corruption, or a potentially exploitable crash. This vulnerability affects Firefox < 112, Focus for Android < 112, Firefox ESR < 102.10, Firefox for Android < 112, and Thunderbird < 102.10.

CVSS v3 8.8 HIGH

8.8^/10

CVSS v3 : HIGH

Vector :

Exploitability : 2.8 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction REQUIRED

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://bugzilla.mozilla.org/show_bug.cgi?id=1821959	Issue Tracking Permissions Required Vendor Advisory
https://www.mozilla.org/security/advisories/mfsa2023-13/	Vendor Advisory
https://www.mozilla.org/security/advisories/mfsa2023-14/	Vendor Advisory
https://www.mozilla.org/security/advisories/mfsa2023-15/	Vendor Advisory
https://bugzilla.mozilla.org/show_bug.cgi?id=1821959	Issue Tracking Permissions Required Vendor Advisory
https://www.mozilla.org/security/advisories/mfsa2023-13/	Vendor Advisory
https://www.mozilla.org/security/advisories/mfsa2023-14/	Vendor Advisory
https://www.mozilla.org/security/advisories/mfsa2023-15/	Vendor Advisory

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:mozilla:firefox::::::::
	cpe:2.3:a:mozilla:firefox_esr::::::::
	cpe:2.3:a:mozilla:firefox_mobile::::::android::*
	cpe:2.3:a:mozilla:focus::::::android::*
	cpe:2.3:a:mozilla:thunderbird::::::::

History

23 Oct 2026, 23:10

Type	Values Removed	Values Added
Summary		(es) Un atacante podría causar que el gestor de memoria libere incorrectamente un puntero que direcciona memoria controlada por el atacante, lo que resultaría en una aserción, corrupción de memoria o un fallo potencialmente explotable. Esta vulnerabilidad afecta a Firefox < 112, Focus para Android < 112, Firefox ESR anterior a 102.10, Firefox para Android < 112 y Thunderbird anterior a 102.10.

Information

Published : 2023-06-02 17:15

Updated : 2026-10-23 23:10

NVD link : CVE-2023-29536

Mitre link : CVE-2023-29536

CVE.ORG link : CVE-2023-29536

JSON object : View

Products Affected

mozilla

firefox
firefox_esr
firefox_mobile
focus
thunderbird

CWE

CWE-416

Use After Free

{"id": "CVE-2023-29536", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2023-29536", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "total"}], "version": "2.0.3", "timestamp": "2025-01-09T15:50:03.153815Z"}}], "cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 8.8, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 2.8}]}, "affected": [{"source": "security@mozilla.org", "affectedData": [{"vendor": "Mozilla", "product": "Firefox", "versions": [{"status": "affected", "version": "unspecified", "lessThan": "112", "versionType": "custom"}]}, {"vendor": "Mozilla", "product": "Focus for Android", "versions": [{"status": "affected", "version": "unspecified", "lessThan": "112", "versionType": "custom"}]}, {"vendor": "Mozilla", "product": "Firefox ESR", "versions": [{"status": "affected", "version": "unspecified", "lessThan": "102.10", "versionType": "custom"}]}, {"vendor": "Mozilla", "product": "Firefox for Android", "versions": [{"status": "affected", "version": "unspecified", "lessThan": "112", "versionType": "custom"}]}, {"vendor": "Mozilla", "product": "Thunderbird", "versions": [{"status": "affected", "version": "unspecified", "lessThan": "102.10", "versionType": "custom"}]}]}], "published": "2023-06-02T17:15:12.477", "references": [{"url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1821959", "tags": ["Issue Tracking", "Permissions Required", "Vendor Advisory"], "source": "security@mozilla.org"}, {"url": "https://www.mozilla.org/security/advisories/mfsa2023-13/", "tags": ["Vendor Advisory"], "source": "security@mozilla.org"}, {"url": "https://www.mozilla.org/security/advisories/mfsa2023-14/", "tags": ["Vendor Advisory"], "source": "security@mozilla.org"}, {"url": "https://www.mozilla.org/security/advisories/mfsa2023-15/", "tags": ["Vendor Advisory"], "source": "security@mozilla.org"}, {"url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1821959", "tags": ["Issue Tracking", "Permissions Required", "Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://www.mozilla.org/security/advisories/mfsa2023-13/", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://www.mozilla.org/security/advisories/mfsa2023-14/", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://www.mozilla.org/security/advisories/mfsa2023-15/", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-416"}]}], "descriptions": [{"lang": "en", "value": "An attacker could cause the memory manager to incorrectly free a pointer that addresses attacker-controlled memory, resulting in an assertion, memory corruption, or a potentially exploitable crash. This vulnerability affects Firefox < 112, Focus for Android < 112, Firefox ESR < 102.10, Firefox for Android < 112, and Thunderbird < 102.10."}, {"lang": "es", "value": "Un atacante podr\u00eda causar que el gestor de memoria libere incorrectamente un puntero que direcciona memoria controlada por el atacante, lo que resultar\u00eda en una aserci\u00f3n, corrupci\u00f3n de memoria o un fallo potencialmente explotable. Esta vulnerabilidad afecta a Firefox < 112, Focus para Android < 112, Firefox ESR anterior a 102.10, Firefox para Android < 112 y Thunderbird anterior a 102.10."}], "lastModified": "2026-10-23T23:10:00.157", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8C6578F4-B46C-473F-8A17-CA6026C32FBE", "versionEndExcluding": "112.0"}, {"criteria": "cpe:2.3:a:mozilla:firefox_esr:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "03736567-251A-4F75-992E-AB7C957FB587", "versionEndExcluding": "102.10"}, {"criteria": "cpe:2.3:a:mozilla:firefox_mobile:*:*:*:*:*:android:*:*", "vulnerable": true, "matchCriteriaId": "18A3592A-C187-439B-B4CC-D0CE28BBCCF8", "versionEndExcluding": "112.0"}, {"criteria": "cpe:2.3:a:mozilla:focus:*:*:*:*:*:android:*:*", "vulnerable": true, "matchCriteriaId": "296D52A2-6FE3-4667-AC75-D01A0043776F", "versionEndExcluding": "112.0"}, {"criteria": "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7C8C9D9E-9BDA-475D-B7D6-10D1C6E9DD72", "versionEndExcluding": "102.10"}], "operator": "OR"}]}], "sourceIdentifier": "security@mozilla.org"}