While implementing AudioWorklets, some code may have casted one type to another, invalid, dynamic type. This could have led to a potentially exploitable crash. This vulnerability affects Firefox < 111, Firefox ESR < 102.9, and Thunderbird < 102.9.
The product does not correctly convert an object, resource, or structure from one type to a different type.
The product allocates or initializes a resource such as a pointer, object, or variable using one type, but it later accesses that resource using a type that is incompatible with the original type.
| Link | Tags |
|---|---|
| https://www.mozilla.org/security/advisories/mfsa2023-09/ | vendor advisory |
| https://www.mozilla.org/security/advisories/mfsa2023-10/ | vendor advisory |
| https://www.mozilla.org/security/advisories/mfsa2023-11/ | vendor advisory |
| https://bugzilla.mozilla.org/show_bug.cgi?id=1811327 | vendor advisory issue tracking permissions required |