CoreCVE
Back

HIGH

Memory corruption in IPC FilePickerShownCallback

Published Sep 11, 2023

Description

When creating a callback over IPC for showing the File Picker window, multiple of the same callbacks could have been created at a time and eventually all simultaneously destroyed as soon as one of the callbacks finished. This could have led to a use-after-free causing a potentially exploitable crash. This vulnerability affects Firefox < 117, Firefox ESR < 102.15, Firefox ESR < 115.2, Thunderbird < 102.15, and Thunderbird < 115.2.

Affected products

Remediation

Red Hat statement

Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.

Weaknesses (1)

CWE-416

Use After Free

References (11)

Change history (0)

No recorded changes yet.

Sources
CVE.org / MITRE
Status PUBLISHED
Assigner mozilla
Published Sep 11, 2023
Updated Dec 18, 2025
Reserved Aug 29, 2023
Link CVE-2023-4575
CISA Vulnrichment
Updated Sep 26, 2024
NVD
Status Modified
Modified Jun 17, 2026
Link CVE-2023-4575
Red Hat
Severity Important
Public date Aug 29, 2023
Links CVE-2023-4575 - Bugzilla
ENISA EUVD
Assigner n/a
Published n/a
Updated n/a
Exploited since n/a
Link n/a