CVE-2023-25732
Public on 2023-02-15
Modified on 2024-02-07
Description
When encoding data from an inputStream in xpcom the size of the input being encoded was not correctly calculated potentially leading to an out of bounds memory write.
Severity
Medium
CVSS v3 Base Score
See breakdown
Affected Packages
| Platform | Package | Release Date | Advisory | Status |
|---|---|---|---|---|
| Amazon Linux 2 - Firefox Extra | firefox | 2023-08-21 | ALAS2FIREFOX-2023-007 | Fixed |
| Amazon Linux 2 - Core | thunderbird | 2023-03-02 | ALAS2-2023-1983 | Fixed |
CVSS Scores
| Score Type | Score | Vector | |
|---|---|---|---|
| Amazon Linux | CVSSv3 | 6.5 | AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H |
| NVD | CVSSv3 | 8.8 | CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H |