CLEANSTART-2024-LQ05343

Dashboard / Vulnerabilities / CLEANSTART-2024-LQ05343

CLEANSTART-2024-LQ05343

Summary: compromised content process could have provided malicious data to `FilterNodeD2D1` resulting in an out-of-bounds write, leading to a potentially exploitable crash in a privileged process

Details: Security vulnerability affects the firefox-esr package. A compromised content process could have provided malicious data to `FilterNodeD2D1` resulting in an out-of-bounds write, leading to a potentially exploitable crash in a privileged process.

References: https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2024/CLEANSTART-2024-LQ05343.json, https://osv.dev/vulnerability/CVE-2023-5168, https://nvd.nist.gov/vuln/detail/CVE-2023-5168