CVE-2023-29537
Multiple race conditions in the font initialization could have led to memory corruption and...
Multiple race conditions in the font initialization could have led to memory corruption and execution of attacker-controlled code. This vulnerability affects Firefox for Android < 112, Firefox < 112, and Focus for Android < 112.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- High
- Privileges needed
- None
- User interaction
- Required
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
What each source reports
NVD Score used
7.5
Multiple race conditions in the font initialization could have led to memory corruption and execution of attacker-controlled code. This vulnerability affects Firefox for Android < 112, Firefox < 112, and Focus for Android < 112.
- Record
CVE-2023-29537- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H - Weakness
- CWE-362
- Updated
- 2026-11-02
CVE List No score
Multiple race conditions in the font initialization could have led to memory corruption and execution of attacker-controlled code. This vulnerability affects Firefox for Android < 112, Firefox < 112, and Focus for Android < 112.
- Record
CVE-2023-29537- Updated
- 2026-11-02
EUVDEUVD-2023-33079 No score
Multiple race conditions in the font initialization could have led to memory corruption and execution of attacker-controlled code. This vulnerability affects Firefox for Android < 112, Firefox < 112, and Focus for Android < 112.
- Record
EUVD-2023-33079- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-cm5p-vcj3-gv4c
7.5
Multiple race conditions in the font initialization could have led to memory corruption and...
Multiple race conditions in the font initialization could have led to memory corruption and execution of attacker-controlled code. This vulnerability affects Firefox for Android < 112, Firefox < 112, and Focus for Android < 112.
- Record
GHSA-cm5p-vcj3-gv4c- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H - Weakness
- CWE-362
- Updated
- 2026-11-02
OSVOESA-2025-1265
9.8
firefox security update
Mozilla Firefox is a standalone web browser, designed for standards compliance and performance. Its functionality can be enhanced via a plethora of extensions.
Security Fix(es):
When loading a script with Subresource Integrity, attackers with an injection capability could trigger the reuse of previously cached entries with incorrect, different integrity metadata. This vulnerability affects Firefox < 103.(CVE-2022-36315)
When using the Performance API, an attacker was able to notice subtle differences between PerformanceEntries and thus learn whether the target URL had been subject to a redirect. This vulnerability affects Firefox < 103.(CVE-2022-36316)
An attacker could have written a value to the first element in a zero-length JavaScript array. Although the array was zero-length, the value was not written to an invalid memory address. This vulnerability affects Firefox < 104.(CVE-2022-38475)
Service Workers did not detect Private Browsing Mode correctly in all cases, which could have led to Service Workers being written to disk for websites visited in Private Browsing Mode. This would not have persisted them in a state where they would run again, but it would have leaked Private Browsing Mode details to disk. This vulnerability affects Firefox < 107.(CVE-2022-45417)
If the user added a security exception for an invalid TLS certificate, opened an ongoing TLS connection with a server that used that certificate, and then deleted the exception, Firefox would have kept the connection alive, making it seem like the certificate was still trusted. This vulnerability affects Firefox < 107.(CVE-2022-45419)
Mozilla developers and community members Lukas Bernhard, Gabriele Svelto, Randell Jesup, and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 107. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 108.(CVE-2022-46879)
Mozilla developers Gabriele Svelto, Yulia Startsev, Andrew McCreight and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 106. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code.<br />Note: This advisory was added on December 13th, 2022 after discovering it was inadvertently left out of the original advisory. The fix was included in the original release of Firefox 107. This vulnerability affects Firefox < 107.(CVE-2022-46883)
Due to URL previews in the network panel of developer tools improperly storing URLs, query parameters could potentially be used to overwrite global objects in privileged code. This vulnerability affects Firefox < 110.(CVE-2023-25731)
The return value from gfx::SourceSurfaceSkia::Map() wasn't being verified which could have potentially lead to a null pointer dereference. This vulnerability affects Firefox < 110.(CVE-2023-25733)
An invalid downcast from nsHTMLDocument to nsIContent could have lead to undefined behavior. This vulnerability affects Firefox < 110.(CVE-2023-25736)
Under certain circumstances, a ServiceWorker's offline cache may have leaked to the file system when using private browsing mode. This vulnerability affects Firefox < 111.(CVE-2023-25750)
When following a redirect to a publicly accessible web extension file, the URL may have been translated to the actual local path, leaking potentially sensitive information. This vulnerability affects Firefox < 111.(CVE-2023-28160)
Memory safety bugs present in Firefox 110. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 111.(CVE-2023-28177)
Multiple race conditions in the font initialization could have led to memory corruption…
- Record
OESA-2025-1265- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVOESA-2025-1268
9.8
firefox security update
Mozilla Firefox is a standalone web browser, designed for standards compliance and performance. Its functionality can be enhanced via a plethora of extensions.
Security Fix(es):
When loading a script with Subresource Integrity, attackers with an injection capability could trigger the reuse of previously cached entries with incorrect, different integrity metadata. This vulnerability affects Firefox < 103.(CVE-2022-36315)
When using the Performance API, an attacker was able to notice subtle differences between PerformanceEntries and thus learn whether the target URL had been subject to a redirect. This vulnerability affects Firefox < 103.(CVE-2022-36316)
An attacker could have written a value to the first element in a zero-length JavaScript array. Although the array was zero-length, the value was not written to an invalid memory address. This vulnerability affects Firefox < 104.(CVE-2022-38475)
Service Workers did not detect Private Browsing Mode correctly in all cases, which could have led to Service Workers being written to disk for websites visited in Private Browsing Mode. This would not have persisted them in a state where they would run again, but it would have leaked Private Browsing Mode details to disk. This vulnerability affects Firefox < 107.(CVE-2022-45417)
If the user added a security exception for an invalid TLS certificate, opened an ongoing TLS connection with a server that used that certificate, and then deleted the exception, Firefox would have kept the connection alive, making it seem like the certificate was still trusted. This vulnerability affects Firefox < 107.(CVE-2022-45419)
Mozilla developers and community members Lukas Bernhard, Gabriele Svelto, Randell Jesup, and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 107. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 108.(CVE-2022-46879)
Mozilla developers Gabriele Svelto, Yulia Startsev, Andrew McCreight and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 106. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code.<br />Note: This advisory was added on December 13th, 2022 after discovering it was inadvertently left out of the original advisory. The fix was included in the original release of Firefox 107. This vulnerability affects Firefox < 107.(CVE-2022-46883)
Due to URL previews in the network panel of developer tools improperly storing URLs, query parameters could potentially be used to overwrite global objects in privileged code. This vulnerability affects Firefox < 110.(CVE-2023-25731)
The return value from gfx::SourceSurfaceSkia::Map() wasn't being verified which could have potentially lead to a null pointer dereference. This vulnerability affects Firefox < 110.(CVE-2023-25733)
An invalid downcast from nsHTMLDocument to nsIContent could have lead to undefined behavior. This vulnerability affects Firefox < 110.(CVE-2023-25736)
Under certain circumstances, a ServiceWorker's offline cache may have leaked to the file system when using private browsing mode. This vulnerability affects Firefox < 111.(CVE-2023-25750)
When following a redirect to a publicly accessible web extension file, the URL may have been translated to the actual local path, leaking potentially sensitive information. This vulnerability affects Firefox < 111.(CVE-2023-28160)
Memory safety bugs present in Firefox 110. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 111.(CVE-2023-28177)
Multiple race conditions in the font initialization could have led to memory corruption…
- Record
OESA-2025-1268- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
Show 5 moreShow less
OSVUBUNTU-CVE-2023-29537
7.5
Multiple race conditions in the font initialization could have led to memory corruption and execution of attacker-controlled code. This vulnerability affects Firefox for Android < 112, Firefox < 112, and Focus for Android < 112.
- Record
UBUNTU-CVE-2023-29537- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSV No score
Multiple race conditions in the font initialization could have led to memory corruption and execution of attacker-controlled code. This vulnerability affects Firefox for Android < 112, Firefox < 112, and Focus for Android < 112.
- Record
CVE-2023-29537- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:12882-1 No score
MozillaFirefox-112.0.1-1.1 on GA media
These are all security issues fixed in the MozillaFirefox-112.0.1-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:12882-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:14572-1 No score
firefox-esr-128.5.1-1.1 on GA media
These are all security issues fixed in the firefox-esr-128.5.1-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:14572-1- Updated
- 2026-11-02
OSVUSN-6010-1 No score
firefox vulnerabilities
Multiple security issues were discovered in Firefox. If a user were tricked into opening a specially crafted website, an attacker could potentially exploit these to cause a denial of service, obtain sensitive information across domains, or execute arbitrary code. (CVE-2023-29537, CVE-2023-29540, CVE-2023-29543, CVE-2023-29544, CVE-2023-29547, CVE-2023-29548, CVE-2023-29549, CVE-2023-29550, CVE-2023-29551)
Irvan Kurniawan discovered that Firefox did not properly manage fullscreen notifications using a combination of window.open, fullscreen requests, window.name assignments, and setInterval calls. An attacker could potentially exploit this issue to perform spoofing attacks. (CVE-2023-29533)
Lukas Bernhard discovered that Firefox did not properly manage memory when doing Garbage Collector compaction. An attacker could potentially exploits this issue to cause a denial of service. (CVE-2023-29535)
Zx from qriousec discovered that Firefox did not properly validate the address to free a pointer provided to the memory manager. An attacker could potentially exploits this issue to cause a denial of service. (CVE-2023-29536)
Alexis aka zoracon discovered that Firefox did not properly validate the URI received by the WebExtension during a load request. An attacker could potentially exploits this to obtain sensitive information. (CVE-2023-29538)
Trung Pham discovered that Firefox did not properly validate the filename directive in the Content-Disposition header. An attacker could possibly exploit this to perform reflected file download attacks potentially tricking users to install malware. (CVE-2023-29539)
Ameen Basha M K discovered that Firefox did not properly validate downloads of files ending in .desktop. An attacker could potentially exploits this issue to execute arbitrary code. (CVE-2023-29541)
- Record
USN-6010-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
firefoxopenEuler:22.03-LTS-SP4 From an advisory covering 187 CVEs |
before 128.8.0-1.oe2203sp4 | 128.8.0-1.oe2203sp4 |
firefoxopenEuler:22.03-LTS-SP3 From an advisory covering 187 CVEs |
before 128.8.0-1.oe2203sp3 | 128.8.0-1.oe2203sp3 |
firefoxUbuntu:18.04:LTS |
before 112.0+build2-0ubuntu0.18.04.1, plus listed versions 56.0+build6-0ubuntu157.0.1+build2-0ubuntu159.0.1+build1-0ubuntu159.0.2+build1-0ubuntu160.0+build2-0ubuntu1 Show 45 moreShow less60.0.1+build2-0ubuntu0.18.04.160.0.2+build1-0ubuntu0.18.04.161.0+build3-0ubuntu0.18.04.161.0.1+build1-0ubuntu0.18.04.162.0+build2-0ubuntu0.18.04.362.0+build2-0ubuntu0.18.04.462.0+build2-0ubuntu0.18.04.562.0.3+build1-0ubuntu0.18.04.163.0+build2-0ubuntu0.18.04.263.0.3+build1-0ubuntu0.18.04.164.0+build3-0ubuntu0.18.04.165.0+build2-0ubuntu0.18.04.165.0.1+build2-0ubuntu0.18.04.166.0+build3-0ubuntu0.18.04.166.0.1+build1-0ubuntu0.18.04.166.0.2+build1-0ubuntu0.18.04.166.0.3+build1-0ubuntu0.18.04.166.0.4+build3-0ubuntu0.18.04.166.0.5+build1-0ubuntu0.18.04.167.0+build2-0ubuntu0.18.04.167.0.1+build1-0ubuntu0.18.04.167.0.2+build2-0ubuntu0.18.04.167.0.3+build1-0ubuntu0.18.04.167.0.4+build1-0ubuntu0.18.04.168.0+build3-0ubuntu0.18.04.168.0.1+build1-0ubuntu0.18.04.168.0.2+build1-0ubuntu0.18.04.169.0+build2-0ubuntu0.18.04.169.0.1+build1-0ubuntu0.18.04.169.0.2+build1-0ubuntu0.18.04.170.0+build2-0ubuntu0.18.04.170.0.1+build1-0ubuntu0.18.04.171.0+build5-0ubuntu0.18.04.172.0.1+build1-0ubuntu0.18.04.172.0.2+build1-0ubuntu0.18.04.173.0+build3-0ubuntu0.18.04.173.0.1+build1-0ubuntu0.18.04.174.0+build3-0ubuntu0.18.04.174.0.1+build1-0ubuntu0.18.04.175.0+build3-0ubuntu0.18.04.176.0+build2-0ubuntu0.18.04.176.0.1+build1-0ubuntu0.18.04.177.0.1+build1-0ubuntu0.18.04.178.0.1+build1-0ubuntu0.18.04.178.0.2+build2-0ubuntu0.18.04.1 |
112.0+build2-0ubuntu0.18.04.1 |
mozjs52Ubuntu:18.04:LTS |
All versions, plus listed versions 52.3.1-0ubuntu352.3.1-7fakesync152.8.1-0ubuntu0.18.04.152.9.1-0ubuntu0.18.04.1 |
None known |
mozjs38Ubuntu:18.04:LTS |
All versions, plus listed versions 38.8.0~repack1-0ubuntu138.8.0~repack1-0ubuntu338.8.0~repack1-0ubuntu4 |
None known |
firefoxUbuntu:20.04:LTS |
before 112.0+build2-0ubuntu0.20.04.1, plus listed versions 69.0.3+build1-0ubuntu170.0+build2-0ubuntu170.0+build2-0ubuntu270.0.1+build1-0ubuntu271.0+build2-0ubuntu2 Show 45 moreShow less71.0+build5-0ubuntu172.0.1+build1-0ubuntu172.0.2+build1-0ubuntu173.0+build1-0ubuntu173.0+build2-0ubuntu173.0+build3-0ubuntu173.0.1+build1-0ubuntu174.0+build1-0ubuntu174.0+build2-0ubuntu174.0+build2-0ubuntu274.0+build3-0ubuntu175.0+build3-0ubuntu176.0+build2-0ubuntu0.20.04.176.0.1+build1-0ubuntu0.20.04.177.0.1+build1-0ubuntu0.20.04.178.0.1+build1-0ubuntu0.20.04.178.0.2+build2-0ubuntu0.20.04.179.0+build1-0ubuntu0.20.04.180.0+build2-0ubuntu0.20.04.180.0.1+build1-0ubuntu0.20.04.181.0+build2-0ubuntu0.20.04.181.0.2+build1-0ubuntu0.20.04.182.0+build2-0ubuntu0.20.04.182.0.2+build1-0ubuntu0.20.04.182.0.3+build1-0ubuntu0.20.04.183.0+build2-0ubuntu0.20.04.184.0+build3-0ubuntu0.20.04.184.0.1+build1-0ubuntu0.20.04.184.0.2+build1-0ubuntu0.20.04.185.0+build1-0ubuntu0.20.04.185.0.1+build1-0ubuntu0.20.04.186.0+build3-0ubuntu0.20.04.186.0.1+build1-0ubuntu0.20.04.187.0+build3-0ubuntu0.20.04.288.0+build2-0ubuntu0.20.04.188.0.1+build1-0ubuntu0.20.04.289.0+build2-0ubuntu0.20.04.289.0.1+build1-0ubuntu0.20.04.189.0.2+build1-0ubuntu0.20.04.190.0+build1-0ubuntu0.20.04.190.0.2+build1-0ubuntu0.20.04.191.0+build2-0ubuntu0.20.04.191.0.1+build1-0ubuntu0.20.04.191.0.2+build1-0ubuntu0.20.04.192.0+build3-0ubuntu0.20.04.1 |
112.0+build2-0ubuntu0.20.04.1 |
mozjs68Ubuntu:20.04:LTS |
All versions, plus listed versions 68.5.0-1~fakesync68.5.0-2~fakesync68.6.0-168.6.0-1ubuntu1 |
None known |
mozjs52Ubuntu:20.04:LTS |
All versions, plus listed versions 52.9.1-1build152.9.1-1ubuntu3 |
None known |
mozjs78Ubuntu:22.04:LTS |
All versions, plus listed versions 78.13.0-178.15.0-278.15.0-4ubuntu1 |
None known |
mozjs91Ubuntu:22.04:LTS |
All versions, plus listed versions 91.5.1-0ubuntu191.6.0-191.6.0-291.7.0-291.10.0-0ubuntu1 |
None known |
Show 4 moreShow less
| Package | Affected | Fixed |
|---|---|---|
firefoxUbuntu:18.04:LTS From an advisory covering 15 CVEs |
before 112.0+build2-0ubuntu0.18.04.1, plus listed versions 56.0+build6-0ubuntu157.0.1+build2-0ubuntu159.0.1+build1-0ubuntu159.0.2+build1-0ubuntu160.0+build2-0ubuntu1 Show 45 moreShow less60.0.1+build2-0ubuntu0.18.04.160.0.2+build1-0ubuntu0.18.04.161.0+build3-0ubuntu0.18.04.161.0.1+build1-0ubuntu0.18.04.162.0+build2-0ubuntu0.18.04.362.0+build2-0ubuntu0.18.04.462.0+build2-0ubuntu0.18.04.562.0.3+build1-0ubuntu0.18.04.163.0+build2-0ubuntu0.18.04.263.0.3+build1-0ubuntu0.18.04.164.0+build3-0ubuntu0.18.04.165.0+build2-0ubuntu0.18.04.165.0.1+build2-0ubuntu0.18.04.166.0+build3-0ubuntu0.18.04.166.0.1+build1-0ubuntu0.18.04.166.0.2+build1-0ubuntu0.18.04.166.0.3+build1-0ubuntu0.18.04.166.0.4+build3-0ubuntu0.18.04.166.0.5+build1-0ubuntu0.18.04.167.0+build2-0ubuntu0.18.04.167.0.1+build1-0ubuntu0.18.04.167.0.2+build2-0ubuntu0.18.04.167.0.3+build1-0ubuntu0.18.04.167.0.4+build1-0ubuntu0.18.04.168.0+build3-0ubuntu0.18.04.168.0.1+build1-0ubuntu0.18.04.168.0.2+build1-0ubuntu0.18.04.169.0+build2-0ubuntu0.18.04.169.0.1+build1-0ubuntu0.18.04.169.0.2+build1-0ubuntu0.18.04.170.0+build2-0ubuntu0.18.04.170.0.1+build1-0ubuntu0.18.04.171.0+build5-0ubuntu0.18.04.172.0.1+build1-0ubuntu0.18.04.172.0.2+build1-0ubuntu0.18.04.173.0+build3-0ubuntu0.18.04.173.0.1+build1-0ubuntu0.18.04.174.0+build3-0ubuntu0.18.04.174.0.1+build1-0ubuntu0.18.04.175.0+build3-0ubuntu0.18.04.176.0+build2-0ubuntu0.18.04.176.0.1+build1-0ubuntu0.18.04.177.0.1+build1-0ubuntu0.18.04.178.0.1+build1-0ubuntu0.18.04.178.0.2+build2-0ubuntu0.18.04.1 |
112.0+build2-0ubuntu0.18.04.1 |
firefoxUbuntu:20.04:LTS From an advisory covering 15 CVEs |
before 112.0+build2-0ubuntu0.20.04.1, plus listed versions 69.0.3+build1-0ubuntu170.0+build2-0ubuntu170.0+build2-0ubuntu270.0.1+build1-0ubuntu271.0+build2-0ubuntu2 Show 45 moreShow less71.0+build5-0ubuntu172.0.1+build1-0ubuntu172.0.2+build1-0ubuntu173.0+build1-0ubuntu173.0+build2-0ubuntu173.0+build3-0ubuntu173.0.1+build1-0ubuntu174.0+build1-0ubuntu174.0+build2-0ubuntu174.0+build2-0ubuntu274.0+build3-0ubuntu175.0+build3-0ubuntu176.0+build2-0ubuntu0.20.04.176.0.1+build1-0ubuntu0.20.04.177.0.1+build1-0ubuntu0.20.04.178.0.1+build1-0ubuntu0.20.04.178.0.2+build2-0ubuntu0.20.04.179.0+build1-0ubuntu0.20.04.180.0+build2-0ubuntu0.20.04.180.0.1+build1-0ubuntu0.20.04.181.0+build2-0ubuntu0.20.04.181.0.2+build1-0ubuntu0.20.04.182.0+build2-0ubuntu0.20.04.182.0.2+build1-0ubuntu0.20.04.182.0.3+build1-0ubuntu0.20.04.183.0+build2-0ubuntu0.20.04.184.0+build3-0ubuntu0.20.04.184.0.1+build1-0ubuntu0.20.04.184.0.2+build1-0ubuntu0.20.04.185.0+build1-0ubuntu0.20.04.185.0.1+build1-0ubuntu0.20.04.186.0+build3-0ubuntu0.20.04.186.0.1+build1-0ubuntu0.20.04.187.0+build3-0ubuntu0.20.04.288.0+build2-0ubuntu0.20.04.188.0.1+build1-0ubuntu0.20.04.289.0+build2-0ubuntu0.20.04.289.0.1+build1-0ubuntu0.20.04.189.0.2+build1-0ubuntu0.20.04.190.0+build1-0ubuntu0.20.04.190.0.2+build1-0ubuntu0.20.04.191.0+build2-0ubuntu0.20.04.191.0.1+build1-0ubuntu0.20.04.191.0.2+build1-0ubuntu0.20.04.192.0+build3-0ubuntu0.20.04.1 |
112.0+build2-0ubuntu0.20.04.1 |
MozillaFirefoxopenSUSE:Tumbleweed From an advisory covering 21 CVEs |
before 112.0.1-1.1 | 112.0.1-1.1 |
firefox-esropenSUSE:Tumbleweed From an advisory covering 1860 CVEs |
before 128.5.1-1.1 | 128.5.1-1.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2023-29537 is a high vulnerability (CVSS 7.5) in Mozilla Firefox, published April 12, 2023. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.56%, the 46th percentile. Fixed in firefox 112.0+build2-0ubuntu0.18.04.1.
References
mozilla.org/security/advisories/mfsa2023-13
bugzilla.mozilla.org/show_bug.cgi?id=1823365
bugzilla.mozilla.org/show_bug.cgi?id=1824200
bugzilla.mozilla.org/show_bug.cgi?id=1825569
nvd.nist.gov/vuln/detail/CVE-2023-29537
github.com/advisories/GHSA-cm5p-vcj3-gv4c
Show 194 moreShow less
github.com/CVEProject/cvelistV5/tree/main/cves/2023/29xxx/CVE-2023-29537.json
openeuler.org/zh/security/security-bulletins/detail?id=openEuler-SA-2025-1265
nvd.nist.gov/vuln/detail/CVE-2022-36315
nvd.nist.gov/vuln/detail/CVE-2022-36316
nvd.nist.gov/vuln/detail/CVE-2022-38475
nvd.nist.gov/vuln/detail/CVE-2022-45417
nvd.nist.gov/vuln/detail/CVE-2022-45419
nvd.nist.gov/vuln/detail/CVE-2022-46879
nvd.nist.gov/vuln/detail/CVE-2022-46883
nvd.nist.gov/vuln/detail/CVE-2023-25731
nvd.nist.gov/vuln/detail/CVE-2023-25733
nvd.nist.gov/vuln/detail/CVE-2023-25736
nvd.nist.gov/vuln/detail/CVE-2023-25750
nvd.nist.gov/vuln/detail/CVE-2023-28160
nvd.nist.gov/vuln/detail/CVE-2023-28177
nvd.nist.gov/vuln/detail/CVE-2023-29538
nvd.nist.gov/vuln/detail/CVE-2023-29540
nvd.nist.gov/vuln/detail/CVE-2023-29547
nvd.nist.gov/vuln/detail/CVE-2023-29549
nvd.nist.gov/vuln/detail/CVE-2023-32208
nvd.nist.gov/vuln/detail/CVE-2023-32209
nvd.nist.gov/vuln/detail/CVE-2023-32210
nvd.nist.gov/vuln/detail/CVE-2023-34415
nvd.nist.gov/vuln/detail/CVE-2023-34417
nvd.nist.gov/vuln/detail/CVE-2023-3482
nvd.nist.gov/vuln/detail/CVE-2023-3600
nvd.nist.gov/vuln/detail/CVE-2023-37203
nvd.nist.gov/vuln/detail/CVE-2023-37204
nvd.nist.gov/vuln/detail/CVE-2023-37205
nvd.nist.gov/vuln/detail/CVE-2023-37206
nvd.nist.gov/vuln/detail/CVE-2023-37209
nvd.nist.gov/vuln/detail/CVE-2023-37210
nvd.nist.gov/vuln/detail/CVE-2023-37212
nvd.nist.gov/vuln/detail/CVE-2023-4051
nvd.nist.gov/vuln/detail/CVE-2023-4053
nvd.nist.gov/vuln/detail/CVE-2023-4058
nvd.nist.gov/vuln/detail/CVE-2023-4577
nvd.nist.gov/vuln/detail/CVE-2023-4578
nvd.nist.gov/vuln/detail/CVE-2023-4579
nvd.nist.gov/vuln/detail/CVE-2023-4580
nvd.nist.gov/vuln/detail/CVE-2023-4582
nvd.nist.gov/vuln/detail/CVE-2023-4583
nvd.nist.gov/vuln/detail/CVE-2023-4585
nvd.nist.gov/vuln/detail/CVE-2023-5169
nvd.nist.gov/vuln/detail/CVE-2023-5170
nvd.nist.gov/vuln/detail/CVE-2023-5171
nvd.nist.gov/vuln/detail/CVE-2023-5172
nvd.nist.gov/vuln/detail/CVE-2023-5173
nvd.nist.gov/vuln/detail/CVE-2023-5175
nvd.nist.gov/vuln/detail/CVE-2023-5176
nvd.nist.gov/vuln/detail/CVE-2023-5388
nvd.nist.gov/vuln/detail/CVE-2023-5721
nvd.nist.gov/vuln/detail/CVE-2023-5722
nvd.nist.gov/vuln/detail/CVE-2023-5723
nvd.nist.gov/vuln/detail/CVE-2023-5724
nvd.nist.gov/vuln/detail/CVE-2023-5725
nvd.nist.gov/vuln/detail/CVE-2023-5728
nvd.nist.gov/vuln/detail/CVE-2023-5729
nvd.nist.gov/vuln/detail/CVE-2023-5730
nvd.nist.gov/vuln/detail/CVE-2023-5731
nvd.nist.gov/vuln/detail/CVE-2023-5732
nvd.nist.gov/vuln/detail/CVE-2023-6204
nvd.nist.gov/vuln/detail/CVE-2023-6205
nvd.nist.gov/vuln/detail/CVE-2023-6206
nvd.nist.gov/vuln/detail/CVE-2023-6859
nvd.nist.gov/vuln/detail/CVE-2023-6860
nvd.nist.gov/vuln/detail/CVE-2023-6863
nvd.nist.gov/vuln/detail/CVE-2023-6866
nvd.nist.gov/vuln/detail/CVE-2023-6869
nvd.nist.gov/vuln/detail/CVE-2024-0743
nvd.nist.gov/vuln/detail/CVE-2024-0748
nvd.nist.gov/vuln/detail/CVE-2024-0754
nvd.nist.gov/vuln/detail/CVE-2024-10458
nvd.nist.gov/vuln/detail/CVE-2024-10459
nvd.nist.gov/vuln/detail/CVE-2024-10460
nvd.nist.gov/vuln/detail/CVE-2024-10461
nvd.nist.gov/vuln/detail/CVE-2024-10462
nvd.nist.gov/vuln/detail/CVE-2024-10463
nvd.nist.gov/vuln/detail/CVE-2024-10464
nvd.nist.gov/vuln/detail/CVE-2024-10465
nvd.nist.gov/vuln/detail/CVE-2024-10466
nvd.nist.gov/vuln/detail/CVE-2024-10467
nvd.nist.gov/vuln/detail/CVE-2024-10941
nvd.nist.gov/vuln/detail/CVE-2024-1547
nvd.nist.gov/vuln/detail/CVE-2024-1548
nvd.nist.gov/vuln/detail/CVE-2024-1549
nvd.nist.gov/vuln/detail/CVE-2024-1550
nvd.nist.gov/vuln/detail/CVE-2024-1551
openeuler.org/zh/security/security-bulletins/detail?id=openEuler-SA-2025-1268
ubuntu.com/security/CVE-2023-29537
mozilla.org/en-US/security/advisories/mfsa2023-13
ubuntu.com/security/notices/USN-6010-1
cve.org/CVERecord?id=CVE-2023-29537
ubuntu.com/security/CVE-2023-29533
ubuntu.com/security/CVE-2023-29535
ubuntu.com/security/CVE-2023-29536
ubuntu.com/security/CVE-2023-29538
ubuntu.com/security/CVE-2023-29539
ubuntu.com/security/CVE-2023-29540
ubuntu.com/security/CVE-2023-29541
ubuntu.com/security/CVE-2023-29543
ubuntu.com/security/CVE-2023-29544
ubuntu.com/security/CVE-2023-29547
ubuntu.com/security/CVE-2023-29548
ubuntu.com/security/CVE-2023-29549
ubuntu.com/security/CVE-2023-29550
ubuntu.com/security/CVE-2023-29551
suse.com/security/cve/CVE-2023-29531
suse.com/security/cve/CVE-2023-29532
suse.com/security/cve/CVE-2023-29533
suse.com/security/cve/CVE-2023-29534
suse.com/security/cve/CVE-2023-29535
suse.com/security/cve/CVE-2023-29536
suse.com/security/cve/CVE-2023-29537
suse.com/security/cve/CVE-2023-29538
suse.com/security/cve/CVE-2023-29539
suse.com/security/cve/CVE-2023-29540
suse.com/security/cve/CVE-2023-29541
suse.com/security/cve/CVE-2023-29542
suse.com/security/cve/CVE-2023-29543
suse.com/security/cve/CVE-2023-29544
suse.com/security/cve/CVE-2023-29545
suse.com/security/cve/CVE-2023-29546
suse.com/security/cve/CVE-2023-29547
suse.com/security/cve/CVE-2023-29548
suse.com/security/cve/CVE-2023-29549
suse.com/security/cve/CVE-2023-29550
suse.com/security/cve/CVE-2023-29551
lists.opensuse.org/archives/list/[email protected]/thread/3HI2RC7AJAHY74Q6MK7GNGWU6TITB22V
suse.com/security/cve/CVE-2006-6077
suse.com/security/cve/CVE-2007-0008
suse.com/security/cve/CVE-2007-0009
suse.com/security/cve/CVE-2007-0078
suse.com/security/cve/CVE-2007-0079
suse.com/security/cve/CVE-2007-0775
suse.com/security/cve/CVE-2007-0776
suse.com/security/cve/CVE-2007-0777
suse.com/security/cve/CVE-2007-0780
suse.com/security/cve/CVE-2007-0800
suse.com/security/cve/CVE-2007-0981
suse.com/security/cve/CVE-2007-0995
suse.com/security/cve/CVE-2007-0996
suse.com/security/cve/CVE-2007-3089
suse.com/security/cve/CVE-2007-3285
suse.com/security/cve/CVE-2007-3656
suse.com/security/cve/CVE-2007-3670
suse.com/security/cve/CVE-2007-3734
suse.com/security/cve/CVE-2007-3735
suse.com/security/cve/CVE-2007-3736
suse.com/security/cve/CVE-2007-3737
suse.com/security/cve/CVE-2007-3738
suse.com/security/cve/CVE-2008-0412
suse.com/security/cve/CVE-2008-0414
suse.com/security/cve/CVE-2008-0415
suse.com/security/cve/CVE-2008-0417
suse.com/security/cve/CVE-2008-0418
suse.com/security/cve/CVE-2008-0419
suse.com/security/cve/CVE-2008-0591
suse.com/security/cve/CVE-2008-0592
suse.com/security/cve/CVE-2008-0593
suse.com/security/cve/CVE-2008-0594
suse.com/security/cve/CVE-2008-4063
suse.com/security/cve/CVE-2008-5913
suse.com/security/cve/CVE-2009-0040
suse.com/security/cve/CVE-2009-0352
suse.com/security/cve/CVE-2009-0354
suse.com/security/cve/CVE-2009-0355
suse.com/security/cve/CVE-2009-0356
suse.com/security/cve/CVE-2009-0357
suse.com/security/cve/CVE-2009-0358
suse.com/security/cve/CVE-2009-0652
suse.com/security/cve/CVE-2009-0771
suse.com/security/cve/CVE-2009-0772
suse.com/security/cve/CVE-2009-0773
suse.com/security/cve/CVE-2009-0774
suse.com/security/cve/CVE-2009-0775
suse.com/security/cve/CVE-2009-0776
suse.com/security/cve/CVE-2009-0777
suse.com/security/cve/CVE-2009-1044
suse.com/security/cve/CVE-2009-1169
suse.com/security/cve/CVE-2009-1302
suse.com/security/cve/CVE-2009-1306
suse.com/security/cve/CVE-2009-1307
suse.com/security/cve/CVE-2009-1308
suse.com/security/cve/CVE-2009-1309
suse.com/security/cve/CVE-2009-1310
suse.com/security/cve/CVE-2009-1311
suse.com/security/cve/CVE-2009-1312
suse.com/security/cve/CVE-2009-1313
suse.com/security/cve/CVE-2009-1563
suse.com/security/cve/CVE-2009-2470
suse.com/security/cve/CVE-2009-2654
suse.com/security/cve/CVE-2009-3069
suse.com/security/cve/CVE-2009-3072
Left out here: 176 versions, 1,874 references and the rest of 2 source descriptions. The JSON record has them.