CVE-2023-5172

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 118

Description The issue is related to a potential use-after-free in the Ion Engine, where a hashtable could have been mutated while there was a live interior reference, leading to an exploitable crash. This could allow a remote attacker to access confidential data, compromise its integrity, and cause a denial of service.

Recommendations For versions prior to 118, update to version 118 or later to resolve the issue. As a temporary workaround, consider restricting the use of the Ion Engine until a patch is available.