It was possible to cause the use of a MessagePort after...
Moderate severity
Unreviewed
Published
Nov 21, 2023
to the GitHub Advisory Database
•
Updated Nov 30, 2023
Description
Published by the National Vulnerability Database
Nov 21, 2023
Published to the GitHub Advisory Database
Nov 21, 2023
Last updated
Nov 30, 2023
It was possible to cause the use of a MessagePort after it had already been freed, which could potentially have led to an exploitable crash. This vulnerability affects Firefox < 120, Firefox < 115.5, and Thunderbird < 115.5.0.
References