CVE-2022-45407

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 107

Description The issue is related to the use of the FontFace() function on a background worker, which could lead to a use-after-free condition and result in a potentially exploitable crash. This condition occurs when memory is accessed after it has been freed, potentially allowing a remote attacker to cause a denial of service.

Recommendations For versions prior to 107, update to version 107 or later to resolve the issue. As a temporary workaround, consider restricting the use of the FontFace() function on background workers until a patch is applied.