Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2022-46881

An optimization in WebGL was incorrect in some cases, and could have led to memory corruption and a potentially exploitable crash. *Note*: This advisory was added on December 13th, 2022 after we better understood the impact of the issue. The fix was included in the original release of Firefox 106. This vulnerability affects Firefox < 106, Firefox ESR < 102.6, and Thunderbird < 102.6.

Published

2022-12-22T20:15:47.547

Last Modified

2025-04-15T14:15:38.470

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 8.8 (HIGH)

Weaknesses
  • Type: Primary
    CWE-787
  • Type: Secondary
    CWE-787
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application mozilla firefox < 106.0 Yes
Application mozilla firefox_esr < 102.6 Yes
Application mozilla thunderbird < 102.6 Yes
References