CVE-2022-38475

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 104

Description The issue is related to insufficient input validation when handling array element values, allowing a remote attacker to bypass security restrictions. An attacker could write a value to the first element in a zero-length JavaScript array without writing to an invalid memory address.

Recommendations For versions prior to 104, update to version 104 or later to resolve the issue. As a temporary workaround, consider restricting the use of zero-length JavaScript arrays until a patch is available.