CVE-2023-32213

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 113 Firefox ESR versions prior to 102.11 Thunderbird versions prior to 102.11

Description The issue is related to a buffer overflow in the FileReader::DoReadData() function, which can be exploited by a remote attacker to execute arbitrary code in the target system. This occurs when an uninitialized value is used as a read limit while reading a file. The vulnerability may allow an attacker to cause memory corruption and execute arbitrary code.

Recommendations For Firefox versions prior to 113, update to version 113 or later to resolve the issue. For Firefox ESR versions prior to 102.11, update to version 102.11 or later to resolve the issue. For Thunderbird versions prior to 102.11, update to version 102.11 or later to resolve the issue.