{
  "cveId": "CVE-2023-29551",
  "url": "https://patchblox.com/security/cve/CVE-2023-29551",
  "summary": "CVE-2023-29551 is fixed in 5 products on 2 platforms, first by firefox 112.0\u002Bbuild2-0ubuntu0.18.04.1, released April 11, 2023. It is not reported as exploited. Patch Radar priority: High.",
  "title": "Mozilla Firefox and 2 others: Out-of-bounds Write",
  "description": "Memory safety bugs present in Firefox 111. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox for Android \u003C 112, Firefox \u003C 112, and Focus for Android \u003C 112.",
  "published": "2023-04-11T17:00:00Z",
  "severity": "Medium",
  "cvss": 8.8,
  "cwe": "CWE-787: Out-of-bounds Write",
  "epss": 0.00526,
  "epssPercentile": 0.44819,
  "priority": "High",
  "priorityTier": 3,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "vendorAdvisory": "https://nvd.nist.gov/vuln/detail/CVE-2023-29551",
  "fixes": [
    {
      "platform": "windows-app",
      "product": "Mozilla Firefox (en-US)",
      "fixedVersion": "112.0",
      "fix": "Mozilla Firefox (en-US) 112.0",
      "url": "https://patchblox.com/security/fix/windows-app/mozilla.firefox-112.0",
      "released": "2023-04-12T00:00:00Z"
    },
    {
      "platform": "windows-app",
      "product": "Mozilla Firefox ESR (en-US)",
      "fixedVersion": "115.4.0",
      "fix": "Mozilla Firefox ESR (en-US) 115.4.0",
      "url": "https://patchblox.com/security/fix/windows-app/mozilla.firefox.esr-115.4.0",
      "released": "2023-10-17T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "firefox",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "112.0\u002Bbuild2-0ubuntu0.18.04.1",
      "fix": "firefox 112.0\u002Bbuild2-0ubuntu0.18.04.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-firefox-112.0-build2-0ubuntu0.18.04.1",
      "released": "2023-04-11T17:00:00Z"
    },
    {
      "platform": "linux",
      "product": "firefox",
      "release": "Ubuntu 20.04 LTS (focal)",
      "fixedVersion": "112.0\u002Bbuild2-0ubuntu0.20.04.1",
      "fix": "firefox 112.0\u002Bbuild2-0ubuntu0.20.04.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-focal-firefox-112.0-build2-0ubuntu0.20.04.1",
      "released": "2023-04-11T17:00:00Z"
    },
    {
      "platform": "linux",
      "product": "firefox-geckodriver",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "112.0\u002Bbuild2-0ubuntu0.18.04.1",
      "fix": "firefox-geckodriver 112.0\u002Bbuild2-0ubuntu0.18.04.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-firefox-geckodriver-112.0-build2-0ubuntu0.18.04.1",
      "released": "2023-04-11T17:00:00Z"
    },
    {
      "platform": "linux",
      "product": "firefox-geckodriver",
      "release": "Ubuntu 20.04 LTS (focal)",
      "fixedVersion": "112.0\u002Bbuild2-0ubuntu0.20.04.1",
      "fix": "firefox-geckodriver 112.0\u002Bbuild2-0ubuntu0.20.04.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-focal-firefox-geckodriver-112.0-build2-0ubuntu0.20.04.1",
      "released": "2023-04-11T17:00:00Z"
    },
    {
      "platform": "linux",
      "product": "firefox-mozsymbols",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "112.0\u002Bbuild2-0ubuntu0.18.04.1",
      "fix": "firefox-mozsymbols 112.0\u002Bbuild2-0ubuntu0.18.04.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-firefox-mozsymbols-112.0-build2-0ubuntu0.18.04.1",
      "released": "2023-04-11T17:00:00Z"
    },
    {
      "platform": "linux",
      "product": "firefox-mozsymbols",
      "release": "Ubuntu 20.04 LTS (focal)",
      "fixedVersion": "112.0\u002Bbuild2-0ubuntu0.20.04.1",
      "fix": "firefox-mozsymbols 112.0\u002Bbuild2-0ubuntu0.20.04.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-focal-firefox-mozsymbols-112.0-build2-0ubuntu0.20.04.1",
      "released": "2023-04-11T17:00:00Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-09T01:18:40Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}