CVE-2023-25738
Members of the <code>DEVMODEW</code> struct set by the printer device driver weren't being...
6.5 MediumFix available
Members of the <code>DEVMODEW</code> struct set by the printer device driver weren't being validated and could have resulted in invalid values which in turn would cause the browser to attempt out of bounds access to related variables.<br>This bug only affects Firefox on Windows. Other operating systems are unaffected.. This vulnerability affects Firefox < 110, Thunderbird < 102.8, and Firefox ESR < 102.8.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- Required
What an attacker can affect
- Confidentiality
- None
- Integrity
- None
- Availability
- High
Exploit likelihood
0.64%Up 0.6 points since Jun 3, 2023
What each source reports
NVD Score used
Members of the <code>DEVMODEW</code> struct set by the printer device driver weren't being validated and could have resulted in invalid values which in turn would cause the browser to attempt out of bounds access to related variables.<br>This bug only affects Firefox on Windows. Other operating systems are unaffected.. This vulnerability affects Firefox < 110, Thunderbird < 102.8, and Firefox ESR < 102.8.
- Record
CVE-2023-25738- CVSS 3.1
- 6.5 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - Weakness
- CWE-125
- Updated
- 2026-11-02
CVE List
Members of the <code>DEVMODEW</code> struct set by the printer device driver weren't being validated and could have resulted in invalid values which in turn would cause the browser to attempt out of bounds access to related variables.<br>This bug only affects Firefox on Windows. Other operating systems are unaffected.. This vulnerability affects Firefox < 110, Thunderbird < 102.8, and Firefox ESR < 102.8.
- Record
CVE-2023-25738- CVSS 3.1
- 6.5 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - Weakness
- CWE-125
- Updated
- 2026-11-02
EUVDEUVD-2023-29645
Members of the <code>DEVMODEW</code> struct set by the printer device driver weren't being validated and could have resulted in invalid values which in turn would cause the browser to attempt out of bounds access to related variables.<br>This bug only affects Firefox on Windows. Other operating systems are unaffected.. This vulnerability affects Firefox < 110, Thunderbird < 102.8, and Firefox ESR < 102.8.
- Record
EUVD-2023-29645- CVSS 3.1
- 6.5 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - Updated
- 2026-11-03
GitHub AdvisoriesGHSA-5wxj-v52j-4fmh
Members of the <code>DEVMODEW</code> struct set by the printer device driver weren't being...
Members of the <code>DEVMODEW</code> struct set by the printer device driver weren't being validated and could have resulted in invalid values which in turn would cause the browser to attempt out of bounds access to related variables.<br>This bug only affects Firefox on Windows. Other operating systems are unaffected.. This vulnerability affects Firefox < 110, Thunderbird < 102.8, and Firefox ESR < 102.8.
- Record
GHSA-5wxj-v52j-4fmh- CVSS 3.1
- 6.5 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - Weakness
- CWE-125
- Updated
- 2026-11-02
OSVALPINE-CVE-2023-25738
Members of the <code>DEVMODEW</code> struct set by the printer device driver weren't being validated and could have resulted in invalid values which in turn would cause the browser to attempt out of bounds access to related variables.<br>This bug only affects Firefox on Windows. Other operating systems are unaffected.. This vulnerability affects Firefox < 110, Thunderbird < 102.8, and Firefox ESR < 102.8.
- Record
ALPINE-CVE-2023-25738- CVSS 3.1
- 6.5 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - Updated
- 2026-11-03
OSVopenSUSE-SU-2024:12702-1No score
libmozjs-102-0-102.8.0-1.1 on GA media
These are all security issues fixed in the libmozjs-102-0-102.8.0-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:12702-1- Updated
- 2026-11-02
Show 7 moreShow less
OSVopenSUSE-SU-2024:12713-1No score
MozillaThunderbird-102.8.0-1.1 on GA media
These are all security issues fixed in the MozillaThunderbird-102.8.0-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:12713-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:12753-1No score
MozillaFirefox-110.0.1-1.1 on GA media
These are all security issues fixed in the MozillaFirefox-110.0.1-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:12753-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:14572-1No score
firefox-esr-128.5.1-1.1 on GA media
These are all security issues fixed in the firefox-esr-128.5.1-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:14572-1- Updated
- 2026-11-02
OSVSUSE-SU-2023:0461-1No score
Security update for MozillaFirefox
This update for MozillaFirefox fixes the following issues:
Updated to version 102.8.0 ESR (bsc#1208144):
- CVE-2023-25728: Fixed content security policy leak in violation reports using iframes.
- CVE-2023-25730: Fixed screen hijack via browser fullscreen mode.
- CVE-2023-25743: Fixed Fullscreen notification not being shown in Firefox Focus.
- CVE-2023-0767: Fixed arbitrary memory write via PKCS 12 in NSS.
- CVE-2023-25735: Fixed potential use-after-free from compartment mismatch in SpiderMonkey.
- CVE-2023-25737: Fixed invalid downcast in SVGUtils::SetupStrokeGeometry.
- CVE-2023-25738: Fixed printing on Windows which could potentially crash Firefox with some device drivers.
- CVE-2023-25739: Fixed use-after-free in mozilla::dom::ScriptLoadContext::~ScriptLoadContext.
- CVE-2023-25729: Fixed extensions opening external schemes without user knowledge.
- CVE-2023-25732: Fixed out of bounds memory write from EncodeInputStream.
- CVE-2023-25734: Fixed opening local .url files that causes unexpected network loads.
- CVE-2023-25742: Fixed tab crash by Web Crypto ImportKey.
- CVE-2023-25744: Fixed Memory safety bugs.
- CVE-2023-25746: Fixed Memory safety bugs.
- Record
SUSE-SU-2023:0461-1- Updated
- 2026-11-02
OSVSUSE-SU-2023:0466-1No score
Security update for MozillaFirefox
This update for MozillaFirefox fixes the following issues:
Updated to version 102.8.0 ESR (bsc#1208144):
- CVE-2023-25728: Fixed content security policy leak in violation reports using iframes.
- CVE-2023-25730: Fixed screen hijack via browser fullscreen mode.
- CVE-2023-25743: Fixed Fullscreen notification not being shown in Firefox Focus.
- CVE-2023-0767: Fixed arbitrary memory write via PKCS 12 in NSS.
- CVE-2023-25735: Fixed potential use-after-free from compartment mismatch in SpiderMonkey.
- CVE-2023-25737: Fixed invalid downcast in SVGUtils::SetupStrokeGeometry.
- CVE-2023-25738: Fixed printing on Windows which could potentially crash Firefox with some device drivers.
- CVE-2023-25739: Fixed use-after-free in mozilla::dom::ScriptLoadContext::~ScriptLoadContext.
- CVE-2023-25729: Fixed extensions opening external schemes without user knowledge.
- CVE-2023-25732: Fixed out of bounds memory write from EncodeInputStream.
- CVE-2023-25734: Fixed opening local .url files that causes unexpected network loads.
- CVE-2023-25742: Fixed tab crash by Web Crypto ImportKey.
- CVE-2023-25744: Fixed Memory safety bugs.
- CVE-2023-25746: Fixed Memory safety bugs.
- Record
SUSE-SU-2023:0466-1- Updated
- 2026-11-02
OSVSUSE-SU-2023:0469-1No score
Security update for MozillaFirefox
This update for MozillaFirefox fixes the following issues:
Updated to version 102.8.0 ESR (bsc#1208144):
- CVE-2023-25728: Fixed content security policy leak in violation reports using iframes.
- CVE-2023-25730: Fixed screen hijack via browser fullscreen mode.
- CVE-2023-25743: Fixed Fullscreen notification not being shown in Firefox Focus.
- CVE-2023-0767: Fixed arbitrary memory write via PKCS 12 in NSS.
- CVE-2023-25735: Fixed potential use-after-free from compartment mismatch in SpiderMonkey.
- CVE-2023-25737: Fixed invalid downcast in SVGUtils::SetupStrokeGeometry.
- CVE-2023-25738: Fixed printing on Windows which could potentially crash Firefox with some device drivers.
- CVE-2023-25739: Fixed use-after-free in mozilla::dom::ScriptLoadContext::~ScriptLoadContext.
- CVE-2023-25729: Fixed extensions opening external schemes without user knowledge.
- CVE-2023-25732: Fixed out of bounds memory write from EncodeInputStream.
- CVE-2023-25734: Fixed opening local .url files that causes unexpected network loads.
- CVE-2023-25742: Fixed tab crash by Web Crypto ImportKey.
- CVE-2023-25744: Fixed Memory safety bugs.
- CVE-2023-25746: Fixed Memory safety bugs.
- Record
SUSE-SU-2023:0469-1- Updated
- 2026-11-02
OSVSUSE-SU-2023:0599-1No score
Security update for MozillaThunderbird
This update for MozillaThunderbird fixes the following issues:
Updated Mozilla Thunderbird to version 102.8.0 (bsc#1208144):
- CVE-2023-0616: Fixed User Interface lockup via messages combining S/MIME and OpenPGP.
- CVE-2023-25728: Fixed content security policy leak in violation reports using iframes.
- CVE-2023-25730: Fixed screen hijack via browser fullscreen mode.
- CVE-2023-0767: Fixed arbitrary memory write via PKCS 12 in NSS.
- CVE-2023-25735: Fixed potential use-after-free from compartment mismatch in SpiderMonkey.
- CVE-2023-25737: Fixed invalid downcast in SVGUtils::SetupStrokeGeometry.
- CVE-2023-25738: Fixed printing on Windows could potentially crash Thunderbird with some device drivers.
- CVE-2023-25739: Fixed use-after-free in mozilla::dom::ScriptLoadContext::~ScriptLoadContext.
- CVE-2023-25729: Fixed vulnerability where extensions could have opened external schemes without user knowledge.
- CVE-2023-25732: Fixed out of bounds memory write from EncodeInputStream.
- CVE-2023-25734: Fixed issue where opening local .url files could cause unexpected network loads.
- CVE-2023-25742: Fixed tab crashing caused by Web Crypto ImportKey.
- CVE-2023-25746: Fixed memory safety bugs.
- Record
SUSE-SU-2023:0599-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
firefox-esrAlpine:v3.18 | before 102.8.0-r0 | 102.8.0-r0 |
firefox-esrAlpine:v3.19 | before 102.8.0-r0 | 102.8.0-r0 |
firefox-esrAlpine:v3.20 | before 102.8.0-r0 | 102.8.0-r0 |
firefox-esrAlpine:v3.21 | before 102.8.0-r0 | 102.8.0-r0 |
firefox-esrAlpine:v3.22 | before 102.8.0-r0 | 102.8.0-r0 |
firefox-esrAlpine:v3.23 | before 102.8.0-r0 | 102.8.0-r0 |
MozillaFirefoxSUSE:Linux Enterprise Module for Desktop Applications 15 SP4 From an advisory covering 14 CVEs | before 102.8.0-150200.152.78.1 | 102.8.0-150200.152.78.1 |
MozillaFirefoxSUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS From an advisory covering 14 CVEs | before 102.8.0-150200.152.78.1 | 102.8.0-150200.152.78.1 |
MozillaFirefoxSUSE:Linux Enterprise High Performance Computing 15 SP3-ESPOS From an advisory covering 14 CVEs | before 102.8.0-150200.152.78.1 | 102.8.0-150200.152.78.1 |
MozillaFirefoxSUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS From an advisory covering 14 CVEs | before 102.8.0-150200.152.78.1 | 102.8.0-150200.152.78.1 |
Show 26 moreShow less
| Package | Affected | Fixed |
|---|---|---|
MozillaFirefoxSUSE:Linux Enterprise Real Time 15 SP3 From an advisory covering 14 CVEs | before 102.8.0-150200.152.78.1 | 102.8.0-150200.152.78.1 |
MozillaFirefoxSUSE:Linux Enterprise Server 15 SP2-LTSS From an advisory covering 14 CVEs | before 102.8.0-150200.152.78.1 | 102.8.0-150200.152.78.1 |
MozillaFirefoxSUSE:Linux Enterprise Server 15 SP3-LTSS From an advisory covering 14 CVEs | before 102.8.0-150200.152.78.1 | 102.8.0-150200.152.78.1 |
MozillaFirefoxSUSE:Linux Enterprise Server for SAP Applications 15 SP2 From an advisory covering 14 CVEs | before 102.8.0-150200.152.78.1 | 102.8.0-150200.152.78.1 |
MozillaFirefoxSUSE:Linux Enterprise Server for SAP Applications 15 SP3 From an advisory covering 14 CVEs | before 102.8.0-150200.152.78.1 | 102.8.0-150200.152.78.1 |
MozillaFirefoxSUSE:Enterprise Storage 7 From an advisory covering 14 CVEs | before 102.8.0-150200.152.78.1 | 102.8.0-150200.152.78.1 |
MozillaFirefoxSUSE:Enterprise Storage 7.1 From an advisory covering 14 CVEs | before 102.8.0-150200.152.78.1 | 102.8.0-150200.152.78.1 |
MozillaFirefoxopenSUSE:Leap 15.4 From an advisory covering 14 CVEs | before 102.8.0-150200.152.78.1 | 102.8.0-150200.152.78.1 |
MozillaFirefoxSUSE:OpenStack Cloud 9 From an advisory covering 14 CVEs | before 102.8.0-112.150.1 | 102.8.0-112.150.1 |
MozillaFirefoxSUSE:OpenStack Cloud Crowbar 9 From an advisory covering 14 CVEs | before 102.8.0-112.150.1 | 102.8.0-112.150.1 |
MozillaFirefoxSUSE:Linux Enterprise Server for SAP Applications 12 SP4 From an advisory covering 14 CVEs | before 102.8.0-112.150.1 | 102.8.0-112.150.1 |
MozillaFirefoxSUSE:Linux Enterprise Software Development Kit 12 SP5 From an advisory covering 14 CVEs | before 102.8.0-112.150.1 | 102.8.0-112.150.1 |
MozillaFirefoxSUSE:Linux Enterprise Server 12 SP2-BCL From an advisory covering 14 CVEs | before 102.8.0-112.150.1 | 102.8.0-112.150.1 |
MozillaFirefoxSUSE:Linux Enterprise Server 12 SP4-ESPOS From an advisory covering 14 CVEs | before 102.8.0-112.150.1 | 102.8.0-112.150.1 |
MozillaFirefoxSUSE:Linux Enterprise Server 12 SP4-LTSS From an advisory covering 14 CVEs | before 102.8.0-112.150.1 | 102.8.0-112.150.1 |
MozillaFirefoxSUSE:Linux Enterprise Server 12 SP5 From an advisory covering 14 CVEs | before 102.8.0-112.150.1 | 102.8.0-112.150.1 |
MozillaFirefoxSUSE:Linux Enterprise Server for SAP Applications 12 SP5 From an advisory covering 14 CVEs | before 102.8.0-112.150.1 | 102.8.0-112.150.1 |
MozillaFirefoxSUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS From an advisory covering 14 CVEs | before 102.8.0-150000.150.76.1 | 102.8.0-150000.150.76.1 |
MozillaFirefoxSUSE:Linux Enterprise Server 15 SP1-LTSS From an advisory covering 14 CVEs | before 102.8.0-150000.150.76.1 | 102.8.0-150000.150.76.1 |
MozillaFirefoxSUSE:Linux Enterprise Server for SAP Applications 15 SP1 From an advisory covering 14 CVEs | before 102.8.0-150000.150.76.1 | 102.8.0-150000.150.76.1 |
MozillaThunderbirdSUSE:Linux Enterprise Module for Package Hub 15 SP4 From an advisory covering 13 CVEs | before 102.8.0-150200.8.105.2 | 102.8.0-150200.8.105.2 |
MozillaThunderbirdSUSE:Linux Enterprise Workstation Extension 15 SP4 From an advisory covering 13 CVEs | before 102.8.0-150200.8.105.2 | 102.8.0-150200.8.105.2 |
MozillaThunderbirdopenSUSE:Leap 15.4 From an advisory covering 13 CVEs | before 102.8.0-150200.8.105.2 | 102.8.0-150200.8.105.2 |
MozillaThunderbirdopenSUSE:Tumbleweed From an advisory covering 13 CVEs | before 102.8.0-1.1 | 102.8.0-1.1 |
MozillaFirefoxopenSUSE:Tumbleweed From an advisory covering 19 CVEs | before 110.0.1-1.1 | 110.0.1-1.1 |
firefox-esropenSUSE:Tumbleweed From an advisory covering 1860 CVEs | before 128.5.1-1.1 | 128.5.1-1.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| affected, aliases, references | OSV | |
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2023-25738 is a medium vulnerability (CVSS 6.5) in Mozilla Firefox, published February 20, 2023. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.64%, the 50th percentile. Fixed in firefox-esr 102.8.0-r0.
References
mozilla.org/security/advisories/mfsa2023-06
bugzilla.mozilla.org/show_bug.cgi?id=1811852
nvd.nist.gov/vuln/detail/CVE-2023-25738
github.com/advisories/GHSA-5wxj-v52j-4fmh
Show 194 moreShow less
security.alpinelinux.org/vuln/CVE-2023-25738
suse.com/support/update/announcement/2023/suse-su-20230461-1
bugzilla.suse.com/1208138
lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/3HI2RC7AJAHY74Q6MK7GNGWU6TITB22V
This page doesn't list everything
Left out here: 1,676 references. The JSON record has them.