CVE-2023-29550

Memory safety bugs present in Firefox 111 and Firefox ESR 102.9. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 112, Focus for Android < 112, Firefox ESR < 102.10, Firefox for Android < 112, and Thunderbird < 102.10.

• https://bugzilla.mozilla.org/buglist.cgi?bug_id=1720594%2C1812498%2C1814217%2C1818357%2C1751945%2C1818762%2C1819493%2C1820389%2C1820602%2C1821448%2C1822413%2C1824828Issue Tracking, Not Applicable
• https://www.mozilla.org/security/advisories/mfsa2023-13/Vendor Advisory
• https://www.mozilla.org/security/advisories/mfsa2023-14/Vendor Advisory
• https://www.mozilla.org/security/advisories/mfsa2023-15/Vendor Advisory
• https://bugzilla.mozilla.org/buglist.cgi?bug_id=1720594%2C1812498%2C1814217%2C1818357%2C1751945%2C1818762%2C1819493%2C1820389%2C1820602%2C1821448%2C1822413%2C1824828Issue Tracking, Not Applicable
• https://www.mozilla.org/security/advisories/mfsa2023-13/Vendor Advisory
• https://www.mozilla.org/security/advisories/mfsa2023-14/Vendor Advisory
• https://www.mozilla.org/security/advisories/mfsa2023-15/Vendor Advisory

Published

Jun 2, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-29545Similar to CVE-2023-28163, this time when choosing 'Save Lin…6.5
• CVE-2023-29546When recording the screen while in Private Browsing on Firef…6.5
• CVE-2023-29547When a secure cookie existed in the Firefox cookie jar an in…6.5
• CVE-2023-29548A wrong lowering instruction in the ARM64 Ion compiler resul…6.5
• CVE-2023-29549Under certain circumstances, a call to the <code>bind</code>…6.5
• CVE-2023-2955A vulnerability, which was classified as critical, was found…9.8
• CVE-2023-29551Memory safety bugs present in Firefox 111. Some of these bug…8.8
• CVE-2023-29552The Service Location Protocol (SLP, RFC 2608) allows an unau…7.5
• CVE-2023-29562TP-Link TL-WPA7510 (EU)_V2_190125 was discovered to contain …9.8
• CVE-2023-29566huedawn-tesseract 0.3.3 and dawnsparks-node-tesseract 0.4.0 …9.8
• CVE-2023-29569Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnera…5.5
• CVE-2023-2957Improper Neutralization of Special Elements used in an SQL C…9.8