PT-2022-6964
CVE-2022-46884
·
Published
2022-10-18
·
Updated
2024-03-13
Description by
CVSS 2.0
10
HighMetricsAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions
Firefox versions prior to 106
Description
A potential use-after-free vulnerability existed in SVG Images if the Refresh Driver was destroyed at an inopportune time. This could have led to memory corruption or a potentially exploitable crash.
Recommendations
For Firefox versions prior to 106, update to Firefox 106 or later to resolve the issue. As a temporary workaround, consider avoiding the use of SVG images in Firefox until the update is applied.
Exploitability
Exploit
Fix
Impacts
Vendors
Affected products
Found an issue in the description? Have something to add? Feel free to write us 👾