Firefox Esr
CVE-2022-38476
HIGH
Severity by source
AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Primary rating from NVD · only source for this CVE.
CVSS VectorNVD
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Lifecycle Timeline
1DescriptionNVD
A data race could occur in the <code>PK11_ChangePW</code> function, potentially leading to a use-after-free vulnerability. In Firefox, this lock protected the data when a user changed their master password. This vulnerability affects Firefox ESR < 102.2 and Thunderbird < 102.2.
AnalysisAI
A data race could occur in the <code>PK11_ChangePW</code> function, potentially leading to a use-after-free vulnerability. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required. No vendor patch available.
Technical ContextAI
This vulnerability is classified as Use After Free (CWE-416), which allows attackers to access freed memory to execute arbitrary code or crash the application. A data race could occur in the <code>PK11_ChangePW</code> function, potentially leading to a use-after-free vulnerability. In Firefox, this lock protected the data when a user changed their master password. This vulnerability affects Firefox ESR < 102.2 and Thunderbird < 102.2. Affected products include: Mozilla Firefox Esr, Mozilla Thunderbird.
RemediationAI
No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Use smart pointers or garbage-collected languages. Set pointers to NULL after freeing. Enable memory sanitizers.
More in Firefox Esr
View allIn certain circumstances, the MCallGetProperty opcode can be emitted with unmet assumptions resulting in an exploitable
A sandbox escape vulnerability exists in Firefox's XPCOM component due to incorrect boundary conditions and integer over
Mozilla developers Andrew McCreight, Gabriele Svelto, Tom Ritter and the Mozilla Fuzzing Team reported memory safety bug
Mozilla Network Security Services (NSS) before 3.16.2.1, 3.16.x before 3.16.5, and 3.17.x before 3.17.1, as used in Mozi
If an attacker could control the contents of an iframe sandboxed with <code>allow-popups</code> but not <code>allow-scri
The Mozilla Fuzzing Team reported potential vulnerabilities present in Thunderbird 91.10. Rated high severity (CVSS 8.8)
If a compromised content process sent an unexpected number of WebAuthN Extensions in a Register command to the parent pr
An attacker could have caused a use-after-free by forcing a text reflow in an SVG object leading to a potentially exploi
If a user was convinced to drag and drop an image to their desktop or other folder, the resulting object could have been
Certain network request objects were freed too early when releasing a network request handle. Rated high severity (CVSS
Applying a CSS filter effect could have accessed out of bounds memory. Rated high severity (CVSS 8.8), this vulnerabilit
Firefox incorrectly treated an inline list-item element as a block element, resulting in an out of bounds read or memory
Same weakness CWE-416 – Use After Free
View allSame technique Information Disclosure
View allShare
External POC / Exploit Code
Leaving vuln.today