← Database

CVE-2022-34480

HIGH CVSS: 8.8 Published: 2022-12-22 Modified: 2026-06-17

Description

Within the lg_init() function, if several allocations succeed but then one fails, an uninitialized pointer would have been freed despite never being allocated. This vulnerability affects Firefox < 102.

Affected Platforms

Mozilla Firefox

Weakness Type

CWE-824, CWE-824

References