Medium severity6.5NVD Advisory· Published Dec 22, 2022· Updated Jun 17, 2026
CVE-2022-28285
CVE-2022-28285
Description
When generating the assembly code for MLoadTypedArrayElementHole, an incorrect AliasSet was used. In conjunction with another vulnerability this could have been used for an out of bounds memory read. This vulnerability affects Thunderbird < 91.8, Firefox < 99, and Firefox ESR < 91.8.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
53cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*+ 4 more
- cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*range: <99.0
- cpe:2.3:a:mozilla:firefox_esr:*:*:*:*:*:*:*:*range: <91.8
- (no CPE)range: <99
- (no CPE)range: unspecified
- (no CPE)range: unspecified
cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*range: <91.8
- (no CPE)range: <91.8
- (no CPE)range: unspecified
- osv-coords45 versionspkg:rpm/almalinux/firefoxpkg:rpm/almalinux/thunderbirdpkg:rpm/opensuse/MozillaFirefox&distro=openSUSE%20Leap%2015.3pkg:rpm/opensuse/MozillaFirefox&distro=openSUSE%20Tumbleweedpkg:rpm/opensuse/MozillaThunderbird&distro=openSUSE%20Leap%2015.3pkg:rpm/opensuse/firefox-esr&distro=openSUSE%20Tumbleweedpkg:rpm/suse/MozillaFirefox&distro=HPE%20Helion%20OpenStack%208pkg:rpm/suse/MozillaFirefox&distro=SUSE%20Enterprise%20Storage%206pkg:rpm/suse/MozillaFirefox&distro=SUSE%20Enterprise%20Storage%207pkg:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP1-ESPOSpkg:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP1-LTSSpkg:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP2-ESPOSpkg:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP2-LTSSpkg:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015-ESPOSpkg:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015-LTSSpkg:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Desktop%20Applications%2015%20SP3pkg:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20Real%20Time%2015%20SP2pkg:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP4-LTSSpkg:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP2-BCLpkg:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP3-BCLpkg:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP3-LTSSpkg:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP4-LTSSpkg:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP5pkg:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP1-BCLpkg:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP1-LTSSpkg:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP2-BCLpkg:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP2-LTSSpkg:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20Server%2015-LTSSpkg:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP3pkg:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP4pkg:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP5pkg:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015pkg:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP1pkg:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP2pkg:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP5pkg:rpm/suse/MozillaFirefox&distro=SUSE%20Manager%20Proxy%204.1pkg:rpm/suse/MozillaFirefox&distro=SUSE%20Manager%20Retail%20Branch%20Server%204.1pkg:rpm/suse/MozillaFirefox&distro=SUSE%20Manager%20Server%204.1pkg:rpm/suse/MozillaFirefox&distro=SUSE%20OpenStack%20Cloud%208pkg:rpm/suse/MozillaFirefox&distro=SUSE%20OpenStack%20Cloud%209pkg:rpm/suse/MozillaFirefox&distro=SUSE%20OpenStack%20Cloud%20Crowbar%208pkg:rpm/suse/MozillaFirefox&distro=SUSE%20OpenStack%20Cloud%20Crowbar%209pkg:rpm/suse/MozillaThunderbird&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Package%20Hub%2015%20SP3pkg:rpm/suse/MozillaThunderbird&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Package%20Hub%2015%20SP4pkg:rpm/suse/MozillaThunderbird&distro=SUSE%20Linux%20Enterprise%20Workstation%20Extension%2015%20SP3
< 91.8.0-1.el8_5.alma+ 44 more
- (no CPE)range: < 91.8.0-1.el8_5.alma
- (no CPE)range: < 91.8.0-1.el8_5.alma
- (no CPE)range: < 91.8.0-150200.152.26.1
- (no CPE)range: < 99.0-1.1
- (no CPE)range: < 91.8.0-150200.8.65.1
- (no CPE)range: < 128.5.1-1.1
- (no CPE)range: < 91.8.0-112.98.1
- (no CPE)range: < 91.8.0-150000.150.27.1
- (no CPE)range: < 91.8.0-150200.152.26.1
- (no CPE)range: < 91.8.0-150000.150.27.1
- (no CPE)range: < 91.8.0-150000.150.27.1
- (no CPE)range: < 91.8.0-150200.152.26.1
- (no CPE)range: < 91.8.0-150200.152.26.1
- (no CPE)range: < 91.8.0-150000.150.27.1
- (no CPE)range: < 91.8.0-150000.150.27.1
- (no CPE)range: < 91.8.0-150200.152.26.1
- (no CPE)range: < 91.8.0-150200.152.26.1
- (no CPE)range: < 91.8.0-78.170.1
- (no CPE)range: < 91.8.0-112.98.1
- (no CPE)range: < 91.8.0-112.98.1
- (no CPE)range: < 91.8.0-112.98.1
- (no CPE)range: < 91.8.0-112.98.1
- (no CPE)range: < 91.8.0-112.98.1
- (no CPE)range: < 91.8.0-150000.150.27.1
- (no CPE)range: < 91.8.0-150000.150.27.1
- (no CPE)range: < 91.8.0-150200.152.26.1
- (no CPE)range: < 91.8.0-150200.152.26.1
- (no CPE)range: < 91.8.0-150000.150.27.1
- (no CPE)range: < 91.8.0-112.98.1
- (no CPE)range: < 91.8.0-112.98.1
- (no CPE)range: < 91.8.0-112.98.1
- (no CPE)range: < 91.8.0-150000.150.27.1
- (no CPE)range: < 91.8.0-150000.150.27.1
- (no CPE)range: < 91.8.0-150200.152.26.1
- (no CPE)range: < 91.8.0-112.98.1
- (no CPE)range: < 91.8.0-150200.152.26.1
- (no CPE)range: < 91.8.0-150200.152.26.1
- (no CPE)range: < 91.8.0-150200.152.26.1
- (no CPE)range: < 91.8.0-112.98.1
- (no CPE)range: < 91.8.0-112.98.1
- (no CPE)range: < 91.8.0-112.98.1
- (no CPE)range: < 91.8.0-112.98.1
- (no CPE)range: < 91.8.0-150200.8.65.1
- (no CPE)range: < 91.8.0-150200.8.65.1
- (no CPE)range: < 91.8.0-150200.8.65.1
Patches
Vulnerability mechanics
References
4- bugzilla.mozilla.org/show_bug.cginvdExploitIssue TrackingVendor Advisory
- www.mozilla.org/security/advisories/mfsa2022-13/nvdExploitVendor Advisory
- www.mozilla.org/security/advisories/mfsa2022-14/nvdExploitVendor Advisory
- www.mozilla.org/security/advisories/mfsa2022-15/nvdExploitVendor Advisory
News mentions
0No linked articles in our index yet.