High severity8.8NVD Advisory· Published Dec 19, 2023· Updated Jun 17, 2026

CVE-2023-6873

Description

Memory safety bugs present in Firefox 120. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 121.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Mozilla Corporation/Firefox3 versions
cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*range: <121.0
- (no CPE)range: <121
- (no CPE)range: unspecified
Debian/linux3 versions
cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*
- cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*
- cpe:2.3:o:debian:debian_linux:12.0:*:*:*:*:*:*:*
osv-coords3 versions
pkg:apk/chainguard/firefox-esr pkg:rpm/opensuse/MozillaFirefox&distro=openSUSE%20Tumbleweed pkg:rpm/opensuse/firefox-esr&distro=openSUSE%20Tumbleweed
< 121.0-r0+ 2 more
- (no CPE)range: < 121.0-r0
- (no CPE)range: < 121.0-1.1
- (no CPE)range: < 128.5.1-1.1

Patches

Vulnerability mechanics

References

lists.debian.org/debian-lts-announce/2023/12/msg00021.htmlnvdMailing ListThird Party Advisory
security.gentoo.org/glsa/202401-10nvdThird Party Advisory
www.debian.org/security/2023/dsa-5582nvdThird Party Advisory
www.mozilla.org/security/advisories/mfsa2023-56/nvdVendor Advisory
bugzilla.mozilla.org/buglist.cginvdBroken LinkIssue Tracking

News mentions

No linked articles in our index yet.

cvss	0.572
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000