CVE-2023-4573

Summary

CVE-2023-4573 is a use-after-free vulnerability affecting multiple versions of Firefox (<117, Firefox ESR < 102.15, Firefox ESR < 115.2) and Thunderbird (<102.15, <115.2). This issue arises when the rendering data received over the IPC `mStream` channel is inadvertently destroyed upon initialization. Consequently, attempting to use the destroyed data after the free operation can lead to a potentially exploitable crash.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.