CVE-2023-25751

Sometimes, when invalidating JIT code while following an iterator, the newly generated code could be overwritten incorrectly. This could lead to a potentially exploitable crash. This vulnerability affects Firefox < 111, Firefox ESR < 102.9, and Thunderbird < 102.9.

• https://bugzilla.mozilla.org/show_bug.cgi?id=1814899Issue Tracking, Permissions Required, Vendor Advisory
• https://www.mozilla.org/security/advisories/mfsa2023-09/Vendor Advisory
• https://www.mozilla.org/security/advisories/mfsa2023-10/Vendor Advisory
• https://www.mozilla.org/security/advisories/mfsa2023-11/Vendor Advisory
• https://bugzilla.mozilla.org/show_bug.cgi?id=1814899Issue Tracking, Permissions Required, Vendor Advisory
• https://www.mozilla.org/security/advisories/mfsa2023-09/Vendor Advisory
• https://www.mozilla.org/security/advisories/mfsa2023-10/Vendor Advisory
• https://www.mozilla.org/security/advisories/mfsa2023-11/Vendor Advisory

Published

Jun 2, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-25746Memory safety bugs present in Firefox ESR 102.7. Some of the…8.8
• CVE-2023-25747A potential use-after-free in libaudio was fixed by disablin…7.5
• CVE-2023-25748By displaying a prompt with a long description, the fullscre…4.3
• CVE-2023-25749Android applications with unpatched vulnerabilities can be l…4.3
• CVE-2023-2575Advantech EKI-1524, EKI-1522, EKI-1521 devices through 1.21 …8.8
• CVE-2023-25750Under certain circumstances, a ServiceWorker's offline cache…4.3
• CVE-2023-25752When accessing throttled streams, the count of available byt…6.5
• CVE-2023-25753 There exists an SSRF (Server-Side Request Forgery) vulnerab…6.5
• CVE-2023-25754Privilege Context Switching Error vulnerability in Apache So…9.8
• CVE-2023-25755Screen Creator Advance 2 Ver.0.1.1.4 Build01A and earlier is…7.8
• CVE-2023-25756Out-of-bounds read in the BIOS firmware for some Intel(R) Pr…8
• CVE-2023-25757Improper access control in some Intel(R) Unison(TM) software…7.2