Mozilla Firefox is a standalone web browser, designed for standards compliance and performance. Its functionality can be enhanced via a plethora of extensions.
Security Fix(es):
There exists a use after free/double free in libwebp. An attacker can use the ApplyFiltersAndEncode() function and loop through to free best.bw and assign best = trial pointer. The second loop will then return 0 because of an Out of memory error in VP8 encoder, the pointer is still assigned to trial and the AddressSanitizer will attempt a double free. (CVE-2023-1999)
{ "severity": "High" }
{ "aarch64": [ "firefox-102.14.0-1.oe2203.aarch64.rpm", "firefox-debugsource-102.14.0-1.oe2203.aarch64.rpm", "firefox-debuginfo-102.14.0-1.oe2203.aarch64.rpm" ], "x86_64": [ "firefox-102.14.0-1.oe2203.x86_64.rpm", "firefox-debuginfo-102.14.0-1.oe2203.x86_64.rpm", "firefox-debugsource-102.14.0-1.oe2203.x86_64.rpm" ], "src": [ "firefox-102.14.0-1.oe2203.src.rpm" ] }