CVE-2023-25747

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2023-25747

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-25747.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2023-25747

Published

2023-06-19T10:10:16.518Z

Modified

2026-08-21T11:48:47.643750533Z

Severity

7.5 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVSS Calculator

Summary

[none]

Details

A potential use-after-free in libaudio was fixed by disabling the AAudio backend when running on Android API below version 30. This bug only affects Firefox for Android. Other versions of Firefox are unaffected. This vulnerability affects Firefox for Android < 110.1.0.

Database specific

{
    "cna_assigner": "mozilla",
    "unresolved_ranges": [
        {
            "source": "AFFECTED_FIELD",
            "extracted_events": [
                {
                    "fixed": "110.1.0"
                }
            ]
        }
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/25xxx/CVE-2023-25747.json"
}

References

Affected packages

Git / github.com/mozilla-mobile/firefox-ios

Affected ranges

Type

GIT

Repo

https://github.com/mozilla-mobile/firefox-ios

Events

Introduced

Fixed

2485ecedf8c505a80cbb6e671978626a090fc37f

Database specific

Show details

{
    "cpe": "cpe:2.3:a:mozilla:firefox_mobile:*:*:*:*:*:android:*:*",
    "source": "CPE_RANGE",
    "extracted_events": [
        {
            "introduced": "0"
        },
        {
            "fixed": "110.1"
        }
    ]
}

Affected versions

20.*

20.1

Other

AuroraV1

AuroraV10

AuroraV11

AuroraV13

AuroraV14

AuroraV15

AuroraV2

AuroraV3

AuroraV6

AuroraV7

AuroraV8

v110.*

v110.0

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-25747.json"