CVE-2023-25745

Memory safety bugs present in Firefox 109. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 110.

• CWE-787
• CWE-787

• https://bugzilla.mozilla.org/buglist.cgi?bug_id=1688592%2C1797186%2C1804998%2C1806521%2C1813284Issue Tracking, Vendor Advisory
• https://www.mozilla.org/security/advisories/mfsa2023-05/Vendor Advisory
• https://bugzilla.mozilla.org/buglist.cgi?bug_id=1688592%2C1797186%2C1804998%2C1806521%2C1813284Issue Tracking, Vendor Advisory
• https://www.mozilla.org/security/advisories/mfsa2023-05/Vendor Advisory
• https://bugzilla.mozilla.org/show_bug.cgi?id=1804998

Published

Jun 2, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-2574Advantech EKI-1524, EKI-1522, EKI-1521 devices through 1.21 …8.8
• CVE-2023-25740After downloading a Windows <code>.scf</code> script from th…8.8
• CVE-2023-25741When dragging and dropping an image cross-origin, the image'…6.5
• CVE-2023-25742When importing a SPKI RSA public key as ECDSA P-256, the key…6.5
• CVE-2023-25743A lack of in app notification for entering fullscreen mode c…7.5
• CVE-2023-25744Mmemory safety bugs present in Firefox 109 and Firefox ESR 1…8.8
• CVE-2023-25746Memory safety bugs present in Firefox ESR 102.7. Some of the…8.8
• CVE-2023-25747A potential use-after-free in libaudio was fixed by disablin…7.5
• CVE-2023-25748By displaying a prompt with a long description, the fullscre…4.3
• CVE-2023-25749Android applications with unpatched vulnerabilities can be l…4.3
• CVE-2023-2575Advantech EKI-1524, EKI-1522, EKI-1521 devices through 1.21 …8.8
• CVE-2023-25750Under certain circumstances, a ServiceWorker's offline cache…4.3