← back
CVE-2022-46871

CVE-2022-46871

CVSS 8.8 HIGHEPSS 0.9%CWE-1104
In short

Firefox used an outdated library (libusrsctp) that contained security flaws which could be exploited by attackers. This could allow an attacker to compromise your browser or system.

Technical detail

Firefox versions prior to 108 included a vulnerable version of libusrsctp library with exploitable vulnerabilities (CWE-1104). Attack vector likely involves remote content interaction; successful exploitation could lead to code execution or information disclosure depending on the underlying libusrsctp vulnerability.

Summary generated and translated by AI from the official description.
An out of date library (libusrsctp) contained vulnerabilities that could potentially be exploited. This vulnerability affects Firefox < 108.
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Affected products
Mozilla · Firefox

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →