{
  "id": "CVE-2023-5171",
  "sourceIdentifier": "security@mozilla.org",
  "published": "2023-09-27T15:19:42.227",
  "lastModified": "2023-09-29T15:15:10.407",
  "vulnStatus": "Awaiting Analysis",
  "descriptions": [
    {
      "lang": "en",
      "value": "During Ion compilation, a Garbage Collection could have resulted in a use-after-free condition, allowing an attacker to write two NUL bytes, and cause a potentially exploitable crash. This vulnerability affects Firefox < 118, Firefox ESR < 115.3, and Thunderbird < 115.3."
    },
    {
      "lang": "es",
      "value": "Durante la compilaci\u00f3n de Ion, una Recolecci\u00f3n de Basura podr\u00eda haber resultado en una condici\u00f3n de use-after-free, lo que permitir\u00eda a un atacante escribir dos bytes NUL y provocar un bloqueo potencialmente explotable. Esta vulnerabilidad afecta a Firefox &lt; 118, Firefox ESR &lt; 115.3 y Thunderbird &lt; 115.3."
    }
  ],
  "metrics": {},
  "references": [
    {
      "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1851599",
      "source": "security@mozilla.org"
    },
    {
      "url": "https://lists.debian.org/debian-lts-announce/2023/09/msg00034.html",
      "source": "security@mozilla.org"
    },
    {
      "url": "https://www.debian.org/security/2023/dsa-5506",
      "source": "security@mozilla.org"
    },
    {
      "url": "https://www.mozilla.org/security/advisories/mfsa2023-41/",
      "source": "security@mozilla.org"
    },
    {
      "url": "https://www.mozilla.org/security/advisories/mfsa2023-42/",
      "source": "security@mozilla.org"
    },
    {
      "url": "https://www.mozilla.org/security/advisories/mfsa2023-43/",
      "source": "security@mozilla.org"
    }
  ]
}