cve/2023/CVE-2023-6857.md
2024-05-25 21:48:12 +02:00

1.1 KiB

CVE-2023-6857

Description

When resolving a symlink, a race may occur where the buffer passed to readlink may actually be smaller than necessary. This bug only affects Firefox on Unix-based operating systems (Android, Linux, MacOS). Windows is unaffected. This vulnerability affects Firefox ESR < 115.6, Thunderbird < 115.6, and Firefox < 121.

POC

Reference

No PoCs from references.

Github