deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2023-44124
Published: 2023-09-27
Description: The vulnerability is to theft of arbitrary files with system privilege in the Screen recording ("com.lge.gametools.gamerecorder") app in the "com/lge/gametools/gamerecorder/settings/ProfilePreferenceFragment.java" file. The main problem is that the app launches implicit intents that can be intercepted by third-party apps installed on the same device. They also can return arbitrary data that will be passed to the "onActivityResult()" method. The Screen recording app saves contents of arbitrary URIs to SD card which is a world-readable storage.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-927, CWE-668
References: https://lgsecurity.lge.com/bulletins/mobile#updateDetails; https://lgsecurity.lge.com/bulletins/mobile#updateDetails
CVE: CVE-2023-44125
Published: 2023-09-27
Description: The vulnerability is the use of implicit PendingIntents without the PendingIntent.FLAG_IMMUTABLE set that leads to theft and/or (over-)write of arbitrary files with system privilege in the Personalized service ("com.lge.abba") app. The attacker's app, if it had access to app notifications, could intercept them and redirect them to its activity, before making it grant access permissions to content providers with the `android:grantUriPermissions="true"` flag.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-285
References: https://lgsecurity.lge.com/bulletins/mobile#updateDetails; https://lgsecurity.lge.com/bulletins/mobile#updateDetails
CVE: CVE-2023-44126
Published: 2023-09-27
Description: The vulnerability is that the Call management ("com.android.server.telecom") app patched by LG sends a lot of LG-owned implicit broadcasts that disclose sensitive data to all third-party apps installed on the same device. Those intents include data such as call states, durations, called numbers, contacts info, etc.
CVSS Score: 3.6 (LOW)
CWE: CWE-925
References: https://lgsecurity.lge.com/bulletins/mobile#updateDetails; https://lgsecurity.lge.com/bulletins/mobile#updateDetails
CVE: CVE-2023-44127
Published: 2023-09-27
Description: he vulnerability is that the Call management ("com.android.server.telecom") app patched by LG launches implicit intents that disclose sensitive data to all third-party apps installed on the same device. Those intents include data such as contact details and phone numbers.
CVSS Score: 3.6 (LOW)
CWE: CWE-927
References: https://lgsecurity.lge.com/bulletins/mobile#updateDetails; https://lgsecurity.lge.com/bulletins/mobile#updateDetails
CVE: CVE-2023-44128
Published: 2023-09-27
Description: he vulnerability is to delete arbitrary files in LGInstallService ("com.lge.lginstallservies") app. The app contains the exported "com.lge.lginstallservies.InstallService" service that exposes an AIDL interface. All its "installPackage*" methods are finally calling the "installPackageVerify()" method that performs signature validation after the delete file method. An attacker can control conditions so this security check is never performed and an attacker-controlled file is deleted.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-367, CWE-367
References: https://lgsecurity.lge.com/bulletins/mobile#updateDetails; https://lgsecurity.lge.com/bulletins/mobile#updateDetails
CVE: CVE-2023-44129
Published: 2023-09-27
Description: The vulnerability is that the Messaging ("com.android.mms") app patched by LG forwards attacker-controlled intents back to the attacker in the exported "com.android.mms.ui.QClipIntentReceiverActivity" activity. The attacker can abuse this functionality by launching this activity and then sending a broadcast with the "com.lge.message.action.QCLIP" action. The attacker can send, e.g., their own data/clipdata and set Intent.FLAG_GRANT_* flags. After the attacker received that intent in the "onActivityResult()" method, they would have access to arbitrary content providers that have the `android:grantUriPermissions="true"` flag set.
CVSS Score: 3.6 (LOW)
CWE: CWE-926
References: https://lgsecurity.lge.com/bulletins/mobile#updateDetails; https://lgsecurity.lge.com/bulletins/mobile#updateDetails
CVE: CVE-2023-44152
Published: 2023-09-27
Description: Sensitive information disclosure and manipulation due to improper authentication. The following products are affected: Acronis Cyber Protect 15 (Linux, macOS, Windows) before build 35979.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-306, CWE-287
References: https://security-advisory.acronis.com/advisories/SEC-1908; https://security-advisory.acronis.com/advisories/SEC-1908
CVE: CVE-2023-44153
Published: 2023-09-27
Description: Sensitive information disclosure due to cleartext storage of sensitive information in memory. The following products are affected: Acronis Cyber Protect 15 (Linux, macOS, Windows) before build 35979.
CVSS Score: 7.5 (HIGH)
CWE: CWE-316, CWE-312
References: https://security-advisory.acronis.com/advisories/SEC-1994; https://security-advisory.acronis.com/advisories/SEC-1994
CVE: CVE-2023-44154
Published: 2023-09-27
Description: Sensitive information disclosure and manipulation due to improper authorization. The following products are affected: Acronis Cyber Protect 15 (Linux, Windows) before build 35979.
CVSS Score: 8.1 (HIGH)
CWE: CWE-639, CWE-639
References: https://security-advisory.acronis.com/advisories/SEC-2436; https://security-advisory.acronis.com/advisories/SEC-2436
CVE: CVE-2023-44155
Published: 2023-09-27
Description: Sensitive information leak through log files. The following products are affected: Acronis Cyber Protect 15 (Linux, Windows) before build 35979.
CVSS Score: 7.5 (HIGH)
CWE: CWE-532, CWE-532
References: https://security-advisory.acronis.com/advisories/SEC-3471; https://security-advisory.acronis.com/advisories/SEC-3471
CVE: CVE-2023-44156
Published: 2023-09-27
Description: Sensitive information disclosure due to spell-jacking. The following products are affected: Acronis Cyber Protect 15 (Linux, Windows) before build 35979.
CVSS Score: 7.5 (HIGH)
CWE: CWE-359
References: https://security-advisory.acronis.com/advisories/SEC-5124; https://security-advisory.acronis.com/advisories/SEC-5124
CVE: CVE-2023-44157
Published: 2023-09-27
Description: Local privilege escalation due to insecure folder permissions. The following products are affected: Acronis Cyber Protect 15 (Windows) before build 35979.
CVSS Score: 7.8 (HIGH)
CWE: CWE-276, CWE-276
References: https://security-advisory.acronis.com/advisories/SEC-3956; https://security-advisory.acronis.com/advisories/SEC-3956
CVE: CVE-2023-44158
Published: 2023-09-27
Description: Sensitive information disclosure due to insufficient token field masking. The following products are affected: Acronis Cyber Protect 15 (Linux, Windows) before build 35979.
CVSS Score: 7.5 (HIGH)
CWE: CWE-522, CWE-522
References: https://security-advisory.acronis.com/advisories/SEC-4071; https://security-advisory.acronis.com/advisories/SEC-4071
CVE: CVE-2023-44159
Published: 2023-09-27
Description: Sensitive information disclosure due to cleartext storage of sensitive information. The following products are affected: Acronis Cyber Protect 15 (Linux, Windows) before build 35979.
CVSS Score: 7.5 (HIGH)
CWE: CWE-312, CWE-312
References: https://security-advisory.acronis.com/advisories/SEC-5787; https://security-advisory.acronis.com/advisories/SEC-5787
CVE: CVE-2023-44160
Published: 2023-09-27
Description: Sensitive information manipulation due to cross-site request forgery. The following products are affected: Acronis Cyber Protect 15 (Linux, Windows) before build 35979.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-352, CWE-352
References: https://security-advisory.acronis.com/advisories/SEC-4083; https://security-advisory.acronis.com/advisories/SEC-4083
CVE: CVE-2023-44161
Published: 2023-09-27
Description: Sensitive information manipulation due to cross-site request forgery. The following products are affected: Acronis Cyber Protect 15 (Linux, Windows) before build 35979.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-352, CWE-352
References: https://security-advisory.acronis.com/advisories/SEC-4084; https://security-advisory.acronis.com/advisories/SEC-4084
CVE: CVE-2023-44169
Published: 2023-09-27
Description: SeaCMS V12.9 was discovered to contain an arbitrary file write vulnerability via the component admin_notify.php.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-22
References: https://github.com/H3ppo/vulnerabilities/blob/main/SeaCMS%20V12.9%20Arbitrary%20file%20write%20vulnerability.pdf; https://github.com/H3ppo/vulnerabilities/blob/main/SeaCMS%20V12.9%20Arbitrary%20file%20write%20vulnerability.pdf
CVE: CVE-2023-44170
Published: 2023-09-27
Description: SeaCMS V12.9 was discovered to contain an arbitrary file write vulnerability via the component admin_ping.php.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-22
References: https://github.com/H3ppo/vulnerabilities/blob/main/SeaCMS%20V12.9%20Arbitrary%20file%20write%20vulnerability.pdf; https://github.com/H3ppo/vulnerabilities/blob/main/SeaCMS%20V12.9%20Arbitrary%20file%20write%20vulnerability.pdf
CVE: CVE-2023-44171
Published: 2023-09-27
Description: SeaCMS V12.9 was discovered to contain an arbitrary file write vulnerability via the component admin_smtp.php.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-22
References: https://github.com/H3ppo/vulnerabilities/blob/main/SeaCMS%20V12.9%20Arbitrary%20file%20write%20vulnerability.pdf; https://github.com/H3ppo/vulnerabilities/blob/main/SeaCMS%20V12.9%20Arbitrary%20file%20write%20vulnerability.pdf
CVE: CVE-2023-44172
Published: 2023-09-27
Description: SeaCMS V12.9 was discovered to contain an arbitrary file write vulnerability via the component admin_weixin.php.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-22
References: https://github.com/H3ppo/vulnerabilities/blob/main/SeaCMS%20V12.9%20Arbitrary%20file%20write%20vulnerability.pdf; https://github.com/H3ppo/vulnerabilities/blob/main/SeaCMS%20V12.9%20Arbitrary%20file%20write%20vulnerability.pdf
CVE: CVE-2023-44205
Published: 2023-09-27
Description: Sensitive information disclosure due to improper authorization. The following products are affected: Acronis Cyber Protect 15 (Linux, Windows) before build 35979.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-639, CWE-639
References: https://security-advisory.acronis.com/advisories/SEC-4321; https://security-advisory.acronis.com/advisories/SEC-4321
CVE: CVE-2023-44206
Published: 2023-09-27
Description: Sensitive information disclosure and manipulation due to improper authorization. The following products are affected: Acronis Cyber Protect 15 (Linux, Windows) before build 35979.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-639, CWE-639
References: https://security-advisory.acronis.com/advisories/SEC-5839; https://security-advisory.acronis.com/advisories/SEC-5839
CVE: CVE-2023-44207
Published: 2023-09-27
Description: Stored cross-site scripting (XSS) vulnerability in protection plan name. The following products are affected: Acronis Cyber Protect 15 (Linux, Windows) before build 35979.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://security-advisory.acronis.com/advisories/SEC-5914; https://security-advisory.acronis.com/advisories/SEC-5914
CVE: CVE-2023-44216
Published: 2023-09-27
Description: PVRIC (PowerVR Image Compression) on Imagination 2018 and later GPU devices offers software-transparent compression that enables cross-origin pixel-stealing attacks against feTurbulence and feBlend in the SVG Filter specification, aka a GPU.zip issue. For example, attackers can sometimes accurately determine text contained on a web page from one origin if they control a resource from a different origin.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-203
References: https://arstechnica.com/security/2023/09/gpus-from-all-major-suppliers-are-vulnerable-to-new-pixel-stealing-attack/; https://blog.imaginationtech.com/introducing-pvric4-taking-image-compression-to-the-next-level/; https://blog.imaginationtech.com/reducing-bandwidth-pvric/
CVE: CVE-2023-4003
Published: 2023-09-27
Description: 
One Identity Password Manager version 5.9.7.1 - An unauthenticated attacker with physical access to a workstation may upgrade privileges to SYSTEM through an unspecified method. CWE-250: Execution with Unnecessary Privileges. 


CVSS Score: 7.6 (HIGH)
CWE: CWE-250
References: https://www.gov.il/en/Departments/faq/cve_advisories; https://www.gov.il/en/Departments/faq/cve_advisories
CVE: CVE-2023-4065
Published: 2023-09-27
Description: A flaw was found in Red Hat AMQ Broker Operator, where it displayed a password defined in ActiveMQArtemisAddress CR, shown in plain text in the Operator Log. This flaw allows an authenticated local attacker to access information outside of their permissions.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-117, CWE-276, CWE-117
References: https://access.redhat.com/errata/RHSA-2023:4720; https://access.redhat.com/security/cve/CVE-2023-4065; https://bugzilla.redhat.com/show_bug.cgi?id=2224630
CVE: CVE-2023-4260
Published: 2023-09-27
Description: Potential off-by-one buffer overflow vulnerability in the Zephyr fuse file system.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-120, CWE-193, CWE-120, CWE-193
References: http://packetstormsecurity.com/files/175657/Zephyr-RTOS-3.x.0-Buffer-Overflows.html; http://seclists.org/fulldisclosure/2023/Nov/1; http://www.openwall.com/lists/oss-security/2023/11/07/1
CVE: CVE-2023-4262
Published: 2023-09-27
Description: Rejected reason: User data field is not attacker controlled
CVE: CVE-2023-4264
Published: 2023-09-27
Description: Potential buffer overflow vulnerabilities n the Zephyr Bluetooth subsystem.
CVSS Score: 7.1 (HIGH)
CWE: CWE-120, CWE-121, CWE-122, CWE-120
References: http://packetstormsecurity.com/files/175657/Zephyr-RTOS-3.x.0-Buffer-Overflows.html; http://seclists.org/fulldisclosure/2023/Nov/1; http://www.openwall.com/lists/oss-security/2023/11/07/1
CVE: CVE-2023-4423
Published: 2023-09-27
Description: The WP Event Manager – Events Calendar, Registrations, Sell Tickets with WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in versions up to, and including, 3.1.37.1  due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissions and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/Jacky-Y/vuls/blob/main/vul5.md; https://github.com/wpeventmanager/wp-event-manager/issues/1483; https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=2969034%40wp-event-manager%2Ftrunk&old=2953169%40wp-event-manager%2Ftrunk&sfp_email=&sfph_mail=
CVE: CVE-2023-4505
Published: 2023-09-27
Description: The Staff / Employee Business Directory for Active Directory plugin for WordPress is vulnerable to LDAP Passback in versions up to, and including, 1.2.3. This is due to insufficient validation when changing the LDAP server. This makes it possible for authenticated attackers, with administrative access and above, to change the LDAP server and retrieve the credentials for the original LDAP server.
CVSS Score: 2.2 (LOW)
CWE: CWE-306
References: https://medium.com/%40cybertrinchera/cve-2023-4506-cve-2023-4505-ldap-passback-on-miniorange-plugins-ca7328c84313; https://plugins.trac.wordpress.org/changeset/2973020/; https://wordpress.org/plugins/ldap-ad-staff-employee-directory-search/
CVE: CVE-2023-4506
Published: 2023-09-27
Description: The Active Directory Integration / LDAP Integration plugin for WordPress is vulnerable to LDAP Passback in versions up to, and including, 4.1.10. This is due to insufficient validation when changing the LDAP server. This makes it possible for authenticated attackers, with administrative access and above, to change the LDAP server and retrieve the credentials for the original LDAP server.
CVSS Score: 2.2 (LOW)
CWE: CWE-306
References: https://medium.com/%40cybertrinchera/cve-2023-4506-cve-2023-4505-ldap-passback-on-miniorange-plugins-ca7328c84313; https://plugins.trac.wordpress.org/changeset/2973005/ldap-login-for-intranet-sites; https://wordpress.org/plugins/ldap-login-for-intranet-sites/
CVE: CVE-2023-4565
Published: 2023-09-27
Description: Broadcast permission control vulnerability in the framework module. Successful exploitation of this vulnerability may cause the hotspot feature to be unavailable.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-732, CWE-732
References: https://consumer.huawei.com/en/support/bulletin/2023/9/; https://device.harmonyos.com/en/docs/security/update/security-bulletins-202309-[PII_REDACTED]; https://consumer.huawei.com/en/support/bulletin/2023/9/
CVE: CVE-2023-4737
Published: 2023-09-27
Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Hedef Tracking Admin Panel allows SQL Injection.This issue affects Admin Panel: before 1.2.


CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89, CWE-89
References: https://www.usom.gov.tr/bildirim/tr-23-0559; https://www.usom.gov.tr/bildirim/tr-23-0559
CVE: CVE-2023-4934
Published: 2023-09-27
Description: Authorization Bypass Through User-Controlled Key vulnerability in Usta AYBS allows Authentication Abuse, Authentication Bypass.This issue affects AYBS: before 1.0.3.


CVSS Score: 8.8 (HIGH)
CWE: CWE-639
References: https://www.usom.gov.tr/bildirim/tr-23-0558; https://www.usom.gov.tr/bildirim/tr-23-0558
CVE: CVE-2023-5135
Published: 2023-09-27
Description: The Simple Cloudflare Turnstile plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'gravity-simple-turnstile' shortcode in versions up to, and including, 1.23.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers with contributor-level and above permissions to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/browser/simple-cloudflare-turnstile/tags/1.23.0/inc/integrations/forms/gravity-forms.php#L14; https://plugins.trac.wordpress.org/browser/simple-cloudflare-turnstile/tags/1.23.0/inc/integrations/forms/gravity-forms.php#L23; https://plugins.trac.wordpress.org/browser/simple-cloudflare-turnstile/tags/1.23.0/simple-cloudflare-turnstile.php#L72
CVE: CVE-2023-5157
Published: 2023-09-27
Description: A vulnerability was found in MariaDB. An OpenVAS port scan on ports 3306 and 4567 allows a malicious remote client to cause a denial of service.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400
References: https://access.redhat.com/errata/RHSA-2023:5259; https://access.redhat.com/errata/RHSA-2023:5683; https://access.redhat.com/errata/RHSA-2023:5684
CVE: CVE-2023-5161
Published: 2023-09-27
Description: The Modal Window plugin for WordPress is vulnerable to Stored Cross-Site Scripting via shortcodes in versions up to, and including, 5.3.5 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers with contributor-level and above permissions to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/browser/modal-window/tags/5.3.5/public/class-public.php#L73; https://plugins.trac.wordpress.org/browser/modal-window/tags/5.3.5/public/shortcode.php#L53; https://plugins.trac.wordpress.org/changeset/2971132/modal-window#file195
CVE: CVE-2023-5162
Published: 2023-09-27
Description: The Options for Twenty Seventeen plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'social-links' shortcode in versions up to, and including, 2.5.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers with contributor-level and above permissions to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/browser/options-for-twenty-seventeen/tags/2.5.0/options-for-twenty-seventeen.php#L3110; https://plugins.trac.wordpress.org/changeset/2971104/options-for-twenty-seventeen; https://www.wordfence.com/threat-intel/vulnerabilities/id/df35d8c6-55ec-4cf5-8055-93ec5193c0a4?source=cve
CVE: CVE-2023-5168
Published: 2023-09-27
Description: A compromised content process could have provided malicious data to `FilterNodeD2D1` resulting in an out-of-bounds write, leading to a potentially exploitable crash in a privileged process.
*This bug only affects Firefox on Windows. Other operating systems are unaffected.* This vulnerability affects Firefox < 118, Firefox ESR < 115.3, and Thunderbird < 115.3.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787, CWE-787
References: https://bugzilla.mozilla.org/show_bug.cgi?id=1846683; https://www.mozilla.org/security/advisories/mfsa2023-41/; https://www.mozilla.org/security/advisories/mfsa2023-42/
CVE: CVE-2023-5169
Published: 2023-09-27
Description: A compromised content process could have provided malicious data in a `PathRecording` resulting in an out-of-bounds write, leading to a potentially exploitable crash in a privileged process. This vulnerability affects Firefox < 118, Firefox ESR < 115.3, and Thunderbird < 115.3.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-787
References: https://bugzilla.mozilla.org/show_bug.cgi?id=1846685; https://lists.debian.org/debian-lts-announce/2023/09/msg00034.html; https://lists.debian.org/debian-lts-announce/2023/10/msg00015.html
CVE: CVE-2023-5170
Published: 2023-09-27
Description: In canvas rendering, a compromised content process could have caused a surface to change unexpectedly, leading to a memory leak of a privileged process. This memory leak could be used to effect a sandbox escape if the correct data was leaked. This vulnerability affects Firefox < 118.
CVSS Score: 7.4 (HIGH)
CWE: CWE-401
References: https://bugzilla.mozilla.org/show_bug.cgi?id=1846686; https://security.gentoo.org/glsa/202401-10; https://www.mozilla.org/security/advisories/mfsa2023-41/
CVE: CVE-2023-5171
Published: 2023-09-27
Description: During Ion compilation, a Garbage Collection could have resulted in a use-after-free condition, allowing an attacker to write two NUL bytes, and cause a potentially exploitable crash. This vulnerability affects Firefox < 118, Firefox ESR < 115.3, and Thunderbird < 115.3.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-416
References: https://bugzilla.mozilla.org/show_bug.cgi?id=1851599; https://lists.debian.org/debian-lts-announce/2023/09/msg00034.html; https://lists.debian.org/debian-lts-announce/2023/10/msg00015.html
CVE: CVE-2023-5172
Published: 2023-09-27
Description: A hashtable  in the Ion Engine could have been mutated while there was a live interior reference, leading to a potential use-after-free and exploitable crash. This vulnerability affects Firefox < 118.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-416, CWE-416
References: https://bugzilla.mozilla.org/show_bug.cgi?id=1852218; https://security.gentoo.org/glsa/202401-10; https://www.mozilla.org/security/advisories/mfsa2023-41/
CVE: CVE-2023-5173
Published: 2023-09-27
Description: In a non-standard configuration of Firefox, an integer overflow could have occurred based on network traffic (possibly under influence of a local unprivileged webpage), leading to an out-of-bounds write to privileged process memory. 
*This bug only affects Firefox if a non-standard preference allowing non-HTTPS Alternate Services (`network.http.altsvc.oe`) is enabled.* This vulnerability affects Firefox < 118.
CVSS Score: 7.5 (HIGH)
CWE: CWE-190
References: https://bugzilla.mozilla.org/show_bug.cgi?id=1823172; https://security.gentoo.org/glsa/202401-10; https://www.mozilla.org/security/advisories/mfsa2023-41/