FICHE CVE

CVE-2023-6857

Publiée le 2023-12-19 · Dernière modification le 2026-06-17

When resolving a symlink, a race may occur where the buffer passed to `readlink` may actually be smaller than necessary. *This bug only affects Firefox on Unix-based operating systems (Android, Linux, MacOS). Windows is unaffected.* This vulnerability affects Firefox ESR < 115.6, Thunderbird < 115.6, and Firefox < 121.

CVSS 3.15.3 MOYENNE

Type de faiblesse

Situation de concurrence (race condition) · CWE-362