{ "id": "CVE-2023-5170", "sourceIdentifier": "security@mozilla.org", "published": "2023-09-27T15:19:42.177", "lastModified": "2023-09-27T15:41:36.187", "vulnStatus": "Awaiting Analysis", "descriptions": [ { "lang": "en", "value": "In canvas rendering, a compromised content process could have caused a surface to change unexpectedly, leading to a memory leak of a privileged process. This memory leak could be used to effect a sandbox escape if the correct data was leaked. This vulnerability affects Firefox < 118." } ], "metrics": {}, "references": [ { "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1846686", "source": "security@mozilla.org" }, { "url": "https://www.mozilla.org/security/advisories/mfsa2023-41/", "source": "security@mozilla.org" } ] }