description: Cross-compartment wrappers wrapping a scripted proxy could have caused objects from other compartments to be stored in the main compartment resulting in a use-after-free. This vulnerability affects Firefox < 115, Firefox ESR < 102.13, and Thunderbird < 102.13.
problem types: Potential use-after-free from compartment mismatch in SpiderMonkey
affected:
{
product: Firefox
vendor: Mozilla
versions:
lessThan: 115, status: affected, version: unspecified, versionType: custom
}
{
product: Firefox ESR
vendor: Mozilla
versions:
lessThan: 102.13, status: affected, version: unspecified, versionType: custom
}
{
product: Thunderbird
vendor: Mozilla
versions:
lessThan: 102.13, status: affected, version: unspecified, versionType: custom
}
