Vulnerabilities > CVE-2022-34480

047910
CVSS 8.8 - HIGH
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
HIGH
Integrity impact
HIGH
Availability impact
HIGH
network
low complexity
CWE-824
NVD
Published: 2022-12-22
Updated: 2022-12-30

Summary

Within the <code>lg_init()</code> function, if several allocations succeed but then one fails, an uninitialized pointer would have been freed despite never being allocated. This vulnerability affects Firefox < 102.

Common Weakness Enumeration (CWE)

References