CVE catalog

CVE-2023-4050

firefox-esr: CVE-2023-4050

[CVE catalog]

Severity
High · CVSS 7.5CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Published
Source
[NVD] · [CVE record]
EPSS
12.58% · Oct 25, 2026

In some cases, an untrusted input stream was copied to a stack buffer without checking its size. This resulted in a potentially exploitable crash which could have led to a sandbox escape. This vulnerability affects Firefox < 116, Firefox ESR < 102.14, and Firefox ESR < 115.1.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianfirefox-esrsid153.5.1esr-1fixed
Debianfirefox-esrforky153.5.1esr-1fixed
Debianfirefox-esrtrixie140.15.0esr-1~deb13u1fixed
Debianfirefox-esrtrixie-security153.5.1esr-1~deb13u1fixed
Debianfirefox-esrbookworm140.12.0esr-1~deb12u1fixed
Debianfirefox-esrbookworm-security153.5.1esr-1~deb12u1fixed
Debianthunderbirdsid1:153.5.1esr-1fixed
Debianthunderbirdforky1:153.5.0esr-1fixed
Debianthunderbirdtrixie1:140.12.0esr-1~deb13u1fixed
Debianthunderbirdtrixie-security1:153.5.1esr-1~deb13u2fixed
Debianthunderbirdbookworm1:140.12.0esr-1~deb12u1fixed
Debianthunderbirdbookworm-security1:153.5.1esr-1~deb12u1fixed
Ubuntumozjs5218.0452.3.1-0ubuntu3vulnerable
Ubuntumozjs5218.0452.3.1-7fakesync1vulnerable
Ubuntumozjs5218.0452.8.1-0ubuntu0.18.04.1vulnerable
Ubuntumozjs5218.0452.9.1-0ubuntu0.18.04.1vulnerable
Ubuntumozjs3818.0438.8.0~repack1-0ubuntu1vulnerable
Ubuntumozjs3818.0438.8.0~repack1-0ubuntu3vulnerable
Ubuntumozjs3818.0438.8.0~repack1-0ubuntu4vulnerable
Ubuntufirefox20.0469.0.3+build1-0ubuntu1vulnerable
Ubuntufirefox20.0470.0+build2-0ubuntu1vulnerable
Ubuntufirefox20.0470.0+build2-0ubuntu2vulnerable
Ubuntufirefox20.0470.0.1+build1-0ubuntu2vulnerable
Ubuntufirefox20.0471.0+build2-0ubuntu2vulnerable
Ubuntufirefox20.0471.0+build5-0ubuntu1vulnerable
Ubuntufirefox20.0472.0.1+build1-0ubuntu1vulnerable
Ubuntufirefox20.0472.0.2+build1-0ubuntu1vulnerable
Ubuntufirefox20.0473.0+build1-0ubuntu1vulnerable
Ubuntufirefox20.0473.0+build2-0ubuntu1vulnerable
Ubuntufirefox20.0473.0+build3-0ubuntu1vulnerable
Ubuntufirefox20.0473.0.1+build1-0ubuntu1vulnerable
Ubuntufirefox20.0474.0+build1-0ubuntu1vulnerable
Ubuntufirefox20.0474.0+build2-0ubuntu1vulnerable
Ubuntufirefox20.0474.0+build2-0ubuntu2vulnerable
Ubuntufirefox20.0474.0+build3-0ubuntu1vulnerable
Ubuntufirefox20.0475.0+build3-0ubuntu1vulnerable
Ubuntufirefox20.0476.0+build2-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.0476.0.1+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.0477.0.1+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.0478.0.1+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.0478.0.2+build2-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.0479.0+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.0480.0+build2-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.0480.0.1+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.0481.0+build2-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.0481.0.2+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.0482.0+build2-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.0482.0.2+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.0482.0.3+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.0483.0+build2-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.0484.0+build3-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.0484.0.1+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.0484.0.2+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.0485.0+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.0485.0.1+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.0486.0+build3-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.0486.0.1+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.0487.0+build3-0ubuntu0.20.04.2vulnerable
Ubuntufirefox20.0488.0+build2-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.0488.0.1+build1-0ubuntu0.20.04.2vulnerable
Ubuntufirefox20.0489.0+build2-0ubuntu0.20.04.2vulnerable
Ubuntufirefox20.0489.0.1+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.0489.0.2+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.0490.0+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.0490.0.2+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.0491.0+build2-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.0491.0.1+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.0491.0.2+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.0492.0+build3-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.0493.0+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.0494.0+build3-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.0495.0+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.0495.0.1+build2-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.0496.0+build2-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.0497.0+build2-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.0497.0.2+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.0498.0+build3-0ubuntu0.20.04.2vulnerable
Ubuntufirefox20.0498.0.1+build2-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.0498.0.2+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.0499.0+build2-0ubuntu0.20.04.2vulnerable
Ubuntufirefox20.04100.0+build2-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.04100.0.2+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.04101.0.1+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.04102.0+build2-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.04103.0+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.04104.0+build3-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.04105.0+build2-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.04106.0.2+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.04106.0.5+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.04107.0+build2-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.04108.0+build2-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.04108.0.1+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.04108.0.2+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.04109.0+build2-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.04109.0.1+build1-0ubuntu0.20.04.2vulnerable
Ubuntufirefox20.04110.0+build3-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.04110.0.1+build2-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.04111.0+build2-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.04111.0.1+build2-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.04112.0+build2-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.04112.0.1+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.04112.0.2+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.04113.0+build2-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.04113.0.1+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.04113.0.2+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.04114.0+build3-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.04114.0.1+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.04114.0.2+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.04115.0+build2-0ubuntu0.20.04.3vulnerable
Ubuntufirefox20.04115.0.2+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.04116.0+build2-0ubuntu0.20.04.2fixed
Ubuntuthunderbird20.041:68.1.2+build1-0ubuntu1vulnerable
Ubuntuthunderbird20.041:68.1.2+build1-0ubuntu2vulnerable
Ubuntuthunderbird20.041:68.2.1+build1-0ubuntu1vulnerable
Ubuntuthunderbird20.041:68.2.2+build1-0ubuntu1vulnerable
Ubuntuthunderbird20.041:68.3.0+build2-0ubuntu1vulnerable
Ubuntuthunderbird20.041:68.3.1+build1-0ubuntu2vulnerable
Ubuntuthunderbird20.041:68.4.1+build1-0ubuntu1vulnerable
Ubuntuthunderbird20.041:68.4.2+build2-0ubuntu1vulnerable
Ubuntuthunderbird20.041:68.5.0+build1-0ubuntu1vulnerable
Ubuntuthunderbird20.041:68.6.0+build2-0ubuntu1vulnerable
Ubuntuthunderbird20.041:68.7.0+build1-0ubuntu1vulnerable
Ubuntuthunderbird20.041:68.7.0+build1-0ubuntu2vulnerable
Ubuntuthunderbird20.041:68.8.0+build2-0ubuntu0.20.04.2vulnerable
Ubuntuthunderbird20.041:68.10.0+build1-0ubuntu0.20.04.1vulnerable
Ubuntuthunderbird20.041:78.7.1+build1-0ubuntu0.20.04.1vulnerable
Ubuntuthunderbird20.041:78.8.1+build1-0ubuntu0.20.04.1vulnerable
Ubuntuthunderbird20.041:78.11.0+build1-0ubuntu0.20.04.2vulnerable
Ubuntuthunderbird20.041:78.13.0+build1-0ubuntu0.20.04.2vulnerable
Ubuntuthunderbird20.041:78.14.0+build1-0ubuntu0.20.04.1vulnerable
Ubuntuthunderbird20.041:78.14.0+build1-0ubuntu0.20.04.2vulnerable
Ubuntuthunderbird20.041:91.5.0+build1-0ubuntu0.20.04.1vulnerable
Ubuntuthunderbird20.041:91.7.0+build2-0ubuntu0.20.04.1vulnerable
Ubuntuthunderbird20.041:91.8.1+build1-0ubuntu0.20.04.1vulnerable
Ubuntuthunderbird20.041:91.9.1+build1-0ubuntu0.20.04.1vulnerable
Ubuntuthunderbird20.041:91.11.0+build2-0ubuntu0.20.04.1vulnerable
Ubuntuthunderbird20.041:102.2.2+build1-0ubuntu0.20.04.1vulnerable
Ubuntuthunderbird20.041:102.4.2+build2-0ubuntu0.20.04.1vulnerable
Ubuntuthunderbird20.041:102.7.1+build2-0ubuntu0.20.04.1vulnerable
Ubuntuthunderbird20.041:102.8.0+build2-0ubuntu0.20.04.1vulnerable
Ubuntuthunderbird20.041:102.9.0+build1-0ubuntu0.20.04.1vulnerable
Ubuntuthunderbird20.041:102.10.0+build2-0ubuntu0.20.04.1vulnerable
Ubuntuthunderbird20.041:102.11.0+build1-0ubuntu0.20.04.1vulnerable
Ubuntuthunderbird20.041:102.13.0+build1-0ubuntu0.20.04.1vulnerable
Ubuntuthunderbird20.041:102.15.0+build1-0ubuntu0.20.04.1fixed
Ubuntumozjs6820.0468.5.0-1~fakesyncvulnerable
Ubuntumozjs6820.0468.5.0-2~fakesyncvulnerable
Ubuntumozjs6820.0468.6.0-1vulnerable
Ubuntumozjs6820.0468.6.0-1ubuntu1vulnerable
Ubuntumozjs5220.0452.9.1-1build1vulnerable
Ubuntumozjs5220.0452.9.1-1ubuntu3vulnerable
Ubuntumozjs10222.04102.11.0-0ubuntu0.22.04.1vulnerable
Ubuntumozjs10222.04102.12.0-0ubuntu0.22.04.1vulnerable
Ubuntumozjs10222.04102.13.0-0ubuntu0.22.04.1vulnerable
Ubuntumozjs10222.04102.15.1-0ubuntu0.22.04.1vulnerable
Ubuntumozjs7822.0478.13.0-1vulnerable
Ubuntumozjs7822.0478.15.0-2vulnerable
Ubuntumozjs7822.0478.15.0-4ubuntu1vulnerable
Ubuntumozjs9122.0491.5.1-0ubuntu1vulnerable
Ubuntumozjs9122.0491.6.0-1vulnerable
Ubuntumozjs9122.0491.6.0-2vulnerable
Ubuntumozjs9122.0491.7.0-2vulnerable
Ubuntumozjs9122.0491.10.0-0ubuntu1vulnerable
Ubuntuthunderbird22.041:91.1.2+build1-0ubuntu1vulnerable
Ubuntuthunderbird22.041:91.3.0+build2-0ubuntu1vulnerable
Ubuntuthunderbird22.041:91.3.1+build1-0ubuntu1vulnerable
Ubuntuthunderbird22.041:91.3.2+build1-0ubuntu1vulnerable
Ubuntuthunderbird22.041:91.4.0+build1.1-0ubuntu1vulnerable
Ubuntuthunderbird22.041:91.4.0+build2-0ubuntu1vulnerable
Ubuntuthunderbird22.041:91.5.0+build1-0ubuntu1vulnerable
Ubuntuthunderbird22.041:91.5.1+build1-0ubuntu1vulnerable
Ubuntuthunderbird22.041:91.6.1+build1-0ubuntu1vulnerable
Ubuntuthunderbird22.041:91.7.0+build1-0ubuntu1vulnerable
Ubuntuthunderbird22.041:91.7.0+build2-0ubuntu1vulnerable
Ubuntuthunderbird22.041:91.8.0+build2-0ubuntu1vulnerable
Ubuntuthunderbird22.041:91.9.1+build1-0ubuntu0.22.04.1vulnerable
Ubuntuthunderbird22.041:91.11.0+build2-0ubuntu0.22.04.1vulnerable
Ubuntuthunderbird22.041:102.2.2+build1-0ubuntu0.22.04.1vulnerable
Ubuntuthunderbird22.041:102.4.2+build2-0ubuntu0.22.04.1vulnerable
Ubuntuthunderbird22.041:102.7.1+build2-0ubuntu0.22.04.1vulnerable
Ubuntuthunderbird22.041:102.8.0+build2-0ubuntu0.22.04.1vulnerable
Ubuntuthunderbird22.041:102.9.0+build1-0ubuntu0.22.04.1vulnerable
Ubuntuthunderbird22.041:102.10.0+build2-0ubuntu0.22.04.1vulnerable
Ubuntuthunderbird22.041:102.11.0+build1-0ubuntu0.22.04.1vulnerable
Ubuntuthunderbird22.041:102.13.0+build1-0ubuntu0.22.04.1vulnerable
Ubuntuthunderbird22.041:102.15.0+build1-0ubuntu0.22.04.1fixed
Ubuntumozjs10224.04102.15.1-1vulnerable
Ubuntumozjs10224.04102.15.1-3ubuntu2vulnerable
CpefirefoxNot reported115.1fixed
Cpedebian_linuxNot reportedNot reportedunknown

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianfirefox-esrsourcesid115.1.0esr-1not yet assignedNot reportedNot reported
Debianfirefox-esrsourceforky115.1.0esr-1not yet assignedNot reportedNot reported
Debianfirefox-esrsourcetrixie115.1.0esr-1not yet assignedNot reportedNot reported
Debianfirefox-esrsourcebookworm102.14.0esr-1~deb12u1not yet assignedNot reportedNot reported
Debianthunderbirdsourcesid1:115.1.0-1not yet assignedNot reportedNot reported
Debianthunderbirdsourceforky1:115.1.0-1not yet assignedNot reportedNot reported
Debianthunderbirdsourcetrixie1:115.1.0-1not yet assignedNot reportedNot reported
Debianthunderbirdsourcebookworm1:102.14.0-1~deb12u1not yet assignedNot reportedNot reported
Ubuntufirefoxdeb20.04116.0+build2-0ubuntu0.20.04.2Not reportedUBUNTU-CVE-2023-4050Not reported
Ubuntuthunderbirddeb20.041:102.15.0+build1-0ubuntu0.20.04.1Not reportedUBUNTU-CVE-2023-4050Not reported
Ubuntuthunderbirddeb22.041:102.15.0+build1-0ubuntu0.22.04.1Not reportedUBUNTU-CVE-2023-4050Not reported
CpefirefoxcpeNot reported115.1Not reportedNVD-CVE-2023-4050Not reported

OpenFactory catalog packages

Matching against OpenFactory catalog package versions is in progress.

References