CVE-2023-4578

When calling `JS::CheckRegExpSyntax` a Syntax Error could have been set which would end in calling `convertToRuntimeErrorAndClear`. A path in the function could attempt to allocate memory when none is available which would have caused a newly created Out of Memory exception to be mishandled as a Syntax Error. This vulnerability affects Firefox < 117, Firefox ESR < 115.2, and Thunderbird < 115.2.

• CWE-770

• https://bugzilla.mozilla.org/show_bug.cgi?id=1839007Issue Tracking, Permissions Required
• https://www.mozilla.org/security/advisories/mfsa2023-34/Vendor Advisory
• https://www.mozilla.org/security/advisories/mfsa2023-36/Vendor Advisory
• https://www.mozilla.org/security/advisories/mfsa2023-38/Vendor Advisory
• https://bugzilla.mozilla.org/show_bug.cgi?id=1839007Issue Tracking, Permissions Required
• https://www.mozilla.org/security/advisories/mfsa2023-34/Vendor Advisory
• https://www.mozilla.org/security/advisories/mfsa2023-36/Vendor Advisory
• https://www.mozilla.org/security/advisories/mfsa2023-38/Vendor Advisory

Published

Sep 11, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-45773In multiple functions of btm_ble_gap.cc, there is a possible…7.8
• CVE-2023-45774In fixUpIncomingShortcutInfo of ShortcutService.java, there …7.8
• CVE-2023-45775In CreateAudioBroadcast of broadcaster.cc, there is a possib…7.8
• CVE-2023-45776In CreateAudioBroadcast of broadcaster.cc, there is a possib…7.8
• CVE-2023-45777In checkKeyIntentParceledCorrectly of AccountManagerService.…7.8
• CVE-2023-45779In the APEX module framework of AOSP, there is a possible ma…7.8
• CVE-2023-45780In Print Service, there is a possible background activity la…7.3
• CVE-2023-45781In parse_gap_data of utils.cc, there is a possible out of bo…5.5
• CVE-2023-4579Search queries in the default search engine could appear to …3.1
• CVE-2023-45793A vulnerability has been identified in Siveillance Control (…5.5
• CVE-2023-45794A vulnerability has been identified in Mendix Applications u…8.1
• CVE-2023-45795A cross-site scripting vulnerability in the Builder Componen…7.8