Описание
An attacker could have written a value to the first element in a zero-length JavaScript array. Although the array was zero-length, the value was not written to an invalid memory address. This vulnerability affects Firefox < 104.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| firefox | fixed | 104.0-1 | package |
Примечания
https://www.mozilla.org/en-US/security/advisories/mfsa2022-33/#CVE-2022-38475
EPSS
Связанные уязвимости
An attacker could have written a value to the first element in a zero-length JavaScript array. Although the array was zero-length, the value was not written to an invalid memory address. This vulnerability affects Firefox < 104.
An attacker could have written a value to the first element in a zero-length JavaScript array. Although the array was zero-length, the value was not written to an invalid memory address. This vulnerability affects Firefox < 104.
An attacker could have written a value to the first element in a zero-length JavaScript array. Although the array was zero-length, the value was not written to an invalid memory address. This vulnerability affects Firefox < 104.
Уязвимость браузера Firefox, связанная с недостаточной проверкой вводимых данных, позволяющая нарушителю обойти ограничения безопасности
ALT-PU-2022-2481: package `firefox` update to version 104.0-alt1
EPSS