CVE-2022-31737
22.12.2022, 20:15
A malicious webpage could have caused an out-of-bounds write in WebGL, leading to memory corruption and a potentially exploitable crash. This vulnerability affects Thunderbird < 91.10, Firefox < 101, and Firefox ESR < 91.10.Enginsight
Vendor | Product | Version |
---|---|---|
mozilla | firefox | 𝑥 < 101 |
mozilla | firefox_esr | 𝑥 < 91.10 |
mozilla | thunderbird | 𝑥 < 91.10 |
𝑥
= Vulnerable software versions

Debian Releases
Debian Product | |||||||||||||
---|---|---|---|---|---|---|---|---|---|---|---|---|---|
firefox |
| ||||||||||||
firefox-esr |
| ||||||||||||
thunderbird |
|

Ubuntu Releases
Ubuntu Product | |||||||||||||||||||||
---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
firefox |
| ||||||||||||||||||||
mozjs38 |
| ||||||||||||||||||||
mozjs52 |
| ||||||||||||||||||||
mozjs68 |
| ||||||||||||||||||||
mozjs78 |
| ||||||||||||||||||||
mozjs91 |
| ||||||||||||||||||||
thunderbird |
|
Common Weakness Enumeration
References