CVE-2023-28162
CVSS 3.1 Score 8.8 of 10 (high)
Details
Published Jun 2, 2023
Updated: Jan 9, 2025
CWE ID 843
CWE ID 704
Summary
CVE-2023-28162 is a vulnerability affecting Firefox versions below 111, Firefox ESR below 102.9, and Thunderbird below 102.9. During the implementation of AudioWorklets, certain code may have inappropriately casted a type to an invalid, dynamic type. This misstep could potentially result in a crash, opening the door to potential exploitation. The cast error in question stems from the complexities of handling dynamic types in web audio processing. This issue underscores the importance of maintaining up-to-date software to mitigate risks.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.