CVE-2023-29537

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 112 Firefox for Android versions prior to 112 Focus for Android versions prior to 112

Description The issue is related to multiple race conditions in the font initialization, which could lead to memory corruption and execution of attacker-controlled code. This could allow a remote attacker to access confidential data, compromise its integrity, and cause a denial of service. The vulnerability is associated with concurrent execution using a shared resource with incorrect synchronization.

Recommendations For Firefox versions prior to 112, update to version 112 or later. For Firefox for Android versions prior to 112, update to version 112 or later. For Focus for Android versions prior to 112, update to version 112 or later.