CLEANSTART-2024-UW72618
Dashboard / Vulnerabilities / CLEANSTART-2024-UW72618
Summary: Drivers are not always robust to extremely large draw calls and in some cases this scenario could have led to a crash
Details: CVE-2023-5724 affects multiple packages. Drivers are not always robust to extremely large draw calls and in some cases this scenario could have led to a crash. See references for individual vulnerability details.
References: https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2024/CLEANSTART-2024-UW72618.json, https://osv.dev/vulnerability/CVE-2023-5724, https://nvd.nist.gov/vuln/detail/CVE-2023-5724
Affected packages
Package
Name: firefox
Purl: pkg:apk/cleanstart/firefox?arch=x86_64
Affected ranges
Type: ECOSYSTEM
Events:
Introduced- 0
Fixed -119.0-r0
Affected versions
Common Vulnerability Scoring System
Attack Vector
Network
Adjacent
Local
Physical
Privileges Required
None
Low
High
User Interaction
None
Required
Scope
Unchanged
Changed
Confidentiality
None
Low
High
Integrity
None
Low
High
Availability
None
Low
High
