CVE-2023-6866

—

CVSS 3.1

8.8 high

EPSS

<1%p50

Published

Dec 19, 2023 (Dec 19, 2023)

Modified

Jun 17, 2026

Description

TypedArrays can be fallible and lacked proper exception handling. This could lead to abuse in other APIs which expect TypedArrays to always succeed. This vulnerability affects Firefox < 121.

Vendors: mozilla
Products: firefox
Weakness: CWE-755
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.7%)

In the news0 stories

No ingested article mentions this CVE yet.