Vulnerability Database

296,223

Total vulnerabilities in the database

CVE-2023-4048

An out-of-bounds read could have led to an exploitable crash when parsing HTML with DOMParser in low memory situations. This vulnerability affects Firefox < 116, Firefox ESR < 102.14, and Firefox ESR < 115.1.

  • Published: Aug 1, 2023
  • Updated: Aug 5, 2023
  • CVE: CVE-2023-4048
  • Severity: High
  • Exploit:

CVSS v3:

  • Severity: High
  • Score: 7.5
  • AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWEs:

Software From Fixed in
mozilla / firefox - 116.0
debian / debian_linux 11.0 11.0.x
debian / debian_linux 12.0 12.0.x
debian / debian_linux 10.0 10.0.x
mozilla / firefox 115.0 115.1
mozilla / firefox 102.0 102.14