CVE-2023-29549

MediumCVSS 6.5/10Last modified Aug 19, 2026

Description

Under certain circumstances, a call to the <code>bind</code> function may have resulted in the incorrect realm. This may have created a vulnerability relating to JavaScript-implemented sandboxes such as SES. This vulnerability affects Firefox for Android < 112, Firefox < 112, and Focus for Android < 112.

Metrics

CVSS 3.1 6.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Weakness enumeration

CWE-326

Affected software

Vendor	Product	Versions
Mozilla	Firefox for Android	>= unspecified, < 112
Mozilla	Firefox	>= unspecified, < 112
Mozilla	Focus for Android	>= unspecified, < 112

References

https://bugzilla.mozilla.org/show_bug.cgi?id=1823042Issue Tracking
https://www.mozilla.org/security/advisories/mfsa2023-13/Vendor Advisory
https://bugzilla.mozilla.org/show_bug.cgi?id=1823042Issue Tracking
https://www.mozilla.org/security/advisories/mfsa2023-13/Vendor Advisory

Timeline

Published: Jun 2, 2023
Last modified: Aug 19, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-29559.8A vulnerability, which was classified as critical, was found in SourceCodester Students Online Internship Timesheet System 1.0. Affected is CVE-2023-295508.8Memory safety bugs present in Firefox 111 and Firefox ESR 102.9. Some of these bugs showed evidence of memory corruption and we presume that CVE-2023-295518.8Memory safety bugs present in Firefox 111. Some of these bugs showed evidence of memory corruption and we presume that with enough effort so CVE-2023-295527.5The Service Location Protocol (SLP, RFC 2608) allows an unauthenticated, remote attacker to register arbitrary services. This could allow th CVE-2023-295629.8TP-Link TL-WPA7510 (EU)_V2_190125 was discovered to contain a stack overflow via the operation parameter at /admin/locale.CVE-2023-295669.8huedawn-tesseract 0.3.3 and dawnsparks-node-tesseract 0.4.0 to 0.4.1 was discovered to contain a remote code execution (RCE) vulnerability v CVE-2023-295695.5Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via ffi_cb_impl_wpwwwww at src/mjs_ffi.c. This vulnerability can lead to CVE-2023-29579.8Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Lisa Software Florist Site allows SQL CVE-2023-295705.5Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via mjs_ffi_cb_free at src/mjs_ffi.c. This vulnerability can lead to a De CVE-2023-295715.5Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via gc_sweep at src/mjs_gc.c. This vulnerability can lead to a Denial of CVE-2023-295735.5Bento4 v1.6.0-639 was discovered to contain an out-of-memory bug in the mp4info component.CVE-2023-295745.5Bento4 v1.6.0-639 was discovered to contain an out-of-memory bug in the mp42avc component.