CVE-2023-25732

Summary

CVE-2023-25732 is a vulnerability affecting Firefox versions below 110, Thunderbird versions below 102.8, and Firefox ESR versions below 102.8. In these software, an issue was discovered in the xpcom component, where data from an inputStream is encoded. The size of the input being encoded is not accurately calculated, resulting in an out-of-bounds memory write. This vulnerability could be exploited by attackers to execute arbitrary code or cause a denial-of-service condition. Users are advised to update their software to the latest versions to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.