CVE-2022-34480

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 102

Description The issue is related to a null pointer dereference. Exploitation of this issue may allow a remote attacker to execute arbitrary code. Within the lg init() function, if several allocations succeed but then one fails, an uninitialized pointer would have been freed despite never being allocated.

Recommendations For versions prior to 102, update to a version that contains a fix for this issue to prevent exploitation. As a temporary workaround, consider restricting access to the lg init() function until a patch is available.