CVE-2022-46884 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2022-46884 Interim 1 3 2023-09-12T23:23:07Z current 2023-08-28T23:23:44Z 2023-09-12T23:23:07Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2022-46884 A potential use-after-free vulnerability existed in SVG Images if the Refresh Driver was destroyed at an inopportune time. This could have lead to memory corruption or a potentially exploitable crash. *Note*: This advisory was added on December 13th, 2022 after discovering it was inadvertently left out of the original advisory. The fix was included in the original release of Firefox 106. This vulnerability affects Firefox < 106. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://www.suse.com/support/security/rating/ SUSE Security Ratings SUSE CaaS Platform 4.0 SUSE Enterprise Storage 7 SUSE Enterprise Storage 7.1 SUSE Linux Enterprise Module for Desktop Applications 15 SP4 SUSE Linux Enterprise Module for Desktop Applications 15 SP5 SUSE Linux Enterprise High Performance Computing 12 SP5 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS SUSE Linux Enterprise Module for Desktop Applications 15 SP4 SUSE Linux Enterprise Module for Desktop Applications 15 SP5 SUSE Linux Enterprise Real Time 15 SP3 SUSE Linux Enterprise Server 11 SP4 LTSS SUSE Linux Enterprise Server 12 SP2-BCL SUSE Linux Enterprise Server 12 SP2-LTSS SUSE Linux Enterprise Server 12 SP4-ESPOS SUSE Linux Enterprise Server 12 SP4-LTSS SUSE Linux Enterprise Server 12 SP5 SUSE Linux Enterprise Software Development Kit 12 SP5 SUSE Linux Enterprise Server 15 SP1-LTSS SUSE Linux Enterprise Server 15 SP2-LTSS SUSE Linux Enterprise Server 15 SP3-LTSS SUSE Linux Enterprise Module for Desktop Applications 15 SP4 SUSE Linux Enterprise Module for Desktop Applications 15 SP5 SUSE Linux Enterprise Server 15-LTSS SUSE Linux Enterprise Server Teradata 12 SP3 SUSE Linux Enterprise Server Teradata 12 SP3-LTSS SUSE Linux Enterprise Server for SAP Applications 12 SP2 SUSE Linux Enterprise Server for SAP Applications 12 SP4 SUSE Linux Enterprise Server for SAP Applications 12 SP5 SUSE Linux Enterprise Software Development Kit 12 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP1 SUSE Linux Enterprise Server for SAP Applications 15 SP2 SUSE Linux Enterprise Server for SAP Applications 15 SP3 SUSE Linux Enterprise Module for Desktop Applications 15 SP4 SUSE Linux Enterprise Module for Desktop Applications 15 SP5 SUSE Linux Enterprise Module for Desktop Applications 15 SP4 SUSE Linux Enterprise Module for Desktop Applications 15 SP4 SUSE Linux Enterprise Module for Desktop Applications 15 SP4 SUSE OpenStack Cloud 9 SUSE OpenStack Cloud Crowbar 9 MozillaFirefox MozillaFirefox-devel MozillaFirefox-translations-common MozillaFirefox-translations-other MozillaFirefox as a component of SUSE CaaS Platform 4.0 MozillaFirefox-devel as a component of SUSE CaaS Platform 4.0 MozillaFirefox-translations-common as a component of SUSE CaaS Platform 4.0 MozillaFirefox-translations-other as a component of SUSE CaaS Platform 4.0 MozillaFirefox as a component of SUSE Enterprise Storage 7 MozillaFirefox as a component of SUSE Enterprise Storage 7.1 MozillaFirefox-devel as a component of SUSE Enterprise Storage 7.1 MozillaFirefox-translations-common as a component of SUSE Enterprise Storage 7.1 MozillaFirefox-translations-other as a component of SUSE Enterprise Storage 7.1 MozillaFirefox as a component of SUSE Linux Enterprise High Performance Computing 12 SP5 MozillaFirefox as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS MozillaFirefox-devel as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS MozillaFirefox-translations-common as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS MozillaFirefox-translations-other as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS MozillaFirefox as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS MozillaFirefox-devel as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS MozillaFirefox-translations-common as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS MozillaFirefox-translations-other as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS MozillaFirefox as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS MozillaFirefox-devel as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS MozillaFirefox-translations-common as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS MozillaFirefox-translations-other as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS MozillaFirefox as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS MozillaFirefox-devel as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS MozillaFirefox-translations-common as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS MozillaFirefox-translations-other as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS MozillaFirefox as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP4 MozillaFirefox-devel as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP4 MozillaFirefox-translations-common as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP4 MozillaFirefox-translations-other as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP4 MozillaFirefox as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP5 MozillaFirefox-devel as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP5 MozillaFirefox-translations-common as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP5 MozillaFirefox-translations-other as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP5 MozillaFirefox as a component of SUSE Linux Enterprise Real Time 15 SP3 MozillaFirefox-devel as a component of SUSE Linux Enterprise Real Time 15 SP3 MozillaFirefox-translations-common as a component of SUSE Linux Enterprise Real Time 15 SP3 MozillaFirefox-translations-other as a component of SUSE Linux Enterprise Real Time 15 SP3 MozillaFirefox as a component of SUSE Linux Enterprise Server 11 SP4 LTSS MozillaFirefox as a component of SUSE Linux Enterprise Server 12 SP2-BCL MozillaFirefox-devel as a component of SUSE Linux Enterprise Server 12 SP2-BCL MozillaFirefox-translations-common as a component of SUSE Linux Enterprise Server 12 SP2-BCL MozillaFirefox as a component of SUSE Linux Enterprise Server 12 SP2-LTSS MozillaFirefox-devel as a component of SUSE Linux Enterprise Server 12 SP2-LTSS MozillaFirefox-translations-common as a component of SUSE Linux Enterprise Server 12 SP2-LTSS MozillaFirefox as a component of SUSE Linux Enterprise Server 12 SP4-ESPOS MozillaFirefox-devel as a component of SUSE Linux Enterprise Server 12 SP4-ESPOS MozillaFirefox-translations-common as a component of SUSE Linux Enterprise Server 12 SP4-ESPOS MozillaFirefox as a component of SUSE Linux Enterprise Server 12 SP4-LTSS MozillaFirefox-devel as a component of SUSE Linux Enterprise Server 12 SP4-LTSS MozillaFirefox-translations-common as a component of SUSE Linux Enterprise Server 12 SP4-LTSS MozillaFirefox as a component of SUSE Linux Enterprise Server 12 SP5 MozillaFirefox-devel as a component of SUSE Linux Enterprise Server 12 SP5 MozillaFirefox-translations-common as a component of SUSE Linux Enterprise Server 12 SP5 MozillaFirefox as a component of SUSE Linux Enterprise Server 15 SP1-LTSS MozillaFirefox-devel as a component of SUSE Linux Enterprise Server 15 SP1-LTSS MozillaFirefox-translations-common as a component of SUSE Linux Enterprise Server 15 SP1-LTSS MozillaFirefox-translations-other as a component of SUSE Linux Enterprise Server 15 SP1-LTSS MozillaFirefox as a component of SUSE Linux Enterprise Server 15 SP2-LTSS MozillaFirefox-devel as a component of SUSE Linux Enterprise Server 15 SP2-LTSS MozillaFirefox-translations-common as a component of SUSE Linux Enterprise Server 15 SP2-LTSS MozillaFirefox-translations-other as a component of SUSE Linux Enterprise Server 15 SP2-LTSS MozillaFirefox as a component of SUSE Linux Enterprise Server 15 SP3-LTSS MozillaFirefox-devel as a component of SUSE Linux Enterprise Server 15 SP3-LTSS MozillaFirefox-translations-common as a component of SUSE Linux Enterprise Server 15 SP3-LTSS MozillaFirefox-translations-other as a component of SUSE Linux Enterprise Server 15 SP3-LTSS MozillaFirefox as a component of SUSE Linux Enterprise Server 15-LTSS MozillaFirefox-devel as a component of SUSE Linux Enterprise Server 15-LTSS MozillaFirefox-translations-common as a component of SUSE Linux Enterprise Server 15-LTSS MozillaFirefox-translations-other as a component of SUSE Linux Enterprise Server 15-LTSS MozillaFirefox as a component of SUSE Linux Enterprise Server Teradata 12 SP3 MozillaFirefox as a component of SUSE Linux Enterprise Server Teradata 12 SP3-LTSS MozillaFirefox as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 MozillaFirefox-devel as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 MozillaFirefox-translations-common as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 MozillaFirefox as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 MozillaFirefox-devel as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 MozillaFirefox-translations-common as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 MozillaFirefox as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 MozillaFirefox as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 MozillaFirefox-devel as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 MozillaFirefox-translations-common as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 MozillaFirefox-translations-other as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 MozillaFirefox as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 MozillaFirefox-devel as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 MozillaFirefox-translations-common as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 MozillaFirefox-translations-other as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 MozillaFirefox as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 MozillaFirefox-devel as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 MozillaFirefox-translations-common as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 MozillaFirefox-translations-other as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 MozillaFirefox-devel as a component of SUSE Linux Enterprise Software Development Kit 12 SP5 MozillaFirefox as a component of SUSE Linux Enterprise Software Development Kit 12 SP5 MozillaFirefox as a component of SUSE OpenStack Cloud 9 MozillaFirefox-devel as a component of SUSE OpenStack Cloud 9 MozillaFirefox-translations-common as a component of SUSE OpenStack Cloud 9 MozillaFirefox as a component of SUSE OpenStack Cloud Crowbar 9 MozillaFirefox-devel as a component of SUSE OpenStack Cloud Crowbar 9 MozillaFirefox-translations-common as a component of SUSE OpenStack Cloud Crowbar 9 A potential use-after-free vulnerability existed in SVG Images if the Refresh Driver was destroyed at an inopportune time. This could have lead to memory corruption or a potentially exploitable crash. *Note*: This advisory was added on December 13th, 2022 after discovering it was inadvertently left out of the original advisory. The fix was included in the original release of Firefox 106. This vulnerability affects Firefox < 106. CVE-2022-46884 SUSE CaaS Platform 4.0:MozillaFirefox SUSE CaaS Platform 4.0:MozillaFirefox-devel SUSE CaaS Platform 4.0:MozillaFirefox-translations-common SUSE CaaS Platform 4.0:MozillaFirefox-translations-other SUSE Enterprise Storage 7.1:MozillaFirefox SUSE Enterprise Storage 7.1:MozillaFirefox-devel SUSE Enterprise Storage 7.1:MozillaFirefox-translations-common SUSE Enterprise Storage 7.1:MozillaFirefox-translations-other SUSE Enterprise Storage 7:MozillaFirefox SUSE Linux Enterprise High Performance Computing 12 SP5:MozillaFirefox SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:MozillaFirefox SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:MozillaFirefox-devel SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:MozillaFirefox-translations-common SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:MozillaFirefox-translations-other SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:MozillaFirefox SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:MozillaFirefox-devel SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:MozillaFirefox-translations-common SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:MozillaFirefox-translations-other SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS:MozillaFirefox SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS:MozillaFirefox-devel SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS:MozillaFirefox-translations-common SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS:MozillaFirefox-translations-other SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:MozillaFirefox SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:MozillaFirefox-devel SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:MozillaFirefox-translations-common SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:MozillaFirefox-translations-other SUSE Linux Enterprise Module for Desktop Applications 15 SP4:MozillaFirefox SUSE Linux Enterprise Module for Desktop Applications 15 SP4:MozillaFirefox-devel SUSE Linux Enterprise Module for Desktop Applications 15 SP4:MozillaFirefox-translations-common SUSE Linux Enterprise Module for Desktop Applications 15 SP4:MozillaFirefox-translations-other SUSE Linux Enterprise Module for Desktop Applications 15 SP5:MozillaFirefox SUSE Linux Enterprise Module for Desktop Applications 15 SP5:MozillaFirefox-devel SUSE Linux Enterprise Module for Desktop Applications 15 SP5:MozillaFirefox-translations-common SUSE Linux Enterprise Module for Desktop Applications 15 SP5:MozillaFirefox-translations-other SUSE Linux Enterprise Real Time 15 SP3:MozillaFirefox SUSE Linux Enterprise Real Time 15 SP3:MozillaFirefox-devel SUSE Linux Enterprise Real Time 15 SP3:MozillaFirefox-translations-common SUSE Linux Enterprise Real Time 15 SP3:MozillaFirefox-translations-other SUSE Linux Enterprise Server 11 SP4 LTSS:MozillaFirefox SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-devel SUSE Linux Enterprise Server 12 SP2-BCL:MozillaFirefox-translations-common SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-devel SUSE Linux Enterprise Server 12 SP2-LTSS:MozillaFirefox-translations-common SUSE Linux Enterprise Server 12 SP4-ESPOS:MozillaFirefox SUSE Linux Enterprise Server 12 SP4-ESPOS:MozillaFirefox-devel SUSE Linux Enterprise Server 12 SP4-ESPOS:MozillaFirefox-translations-common SUSE Linux Enterprise Server 12 SP4-LTSS:MozillaFirefox SUSE Linux Enterprise Server 12 SP4-LTSS:MozillaFirefox-devel SUSE Linux Enterprise Server 12 SP4-LTSS:MozillaFirefox-translations-common SUSE Linux Enterprise Server 12 SP5:MozillaFirefox SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-devel SUSE Linux Enterprise Server 12 SP5:MozillaFirefox-translations-common SUSE Linux Enterprise Server 15 SP1-LTSS:MozillaFirefox SUSE Linux Enterprise Server 15 SP1-LTSS:MozillaFirefox-devel SUSE Linux Enterprise Server 15 SP1-LTSS:MozillaFirefox-translations-common SUSE Linux Enterprise Server 15 SP1-LTSS:MozillaFirefox-translations-other SUSE Linux Enterprise Server 15 SP2-LTSS:MozillaFirefox SUSE Linux Enterprise Server 15 SP2-LTSS:MozillaFirefox-devel SUSE Linux Enterprise Server 15 SP2-LTSS:MozillaFirefox-translations-common SUSE Linux Enterprise Server 15 SP2-LTSS:MozillaFirefox-translations-other SUSE Linux Enterprise Server 15 SP3-LTSS:MozillaFirefox SUSE Linux Enterprise Server 15 SP3-LTSS:MozillaFirefox-devel SUSE Linux Enterprise Server 15 SP3-LTSS:MozillaFirefox-translations-common SUSE Linux Enterprise Server 15 SP3-LTSS:MozillaFirefox-translations-other SUSE Linux Enterprise Server 15-LTSS:MozillaFirefox SUSE Linux Enterprise Server 15-LTSS:MozillaFirefox-devel SUSE Linux Enterprise Server 15-LTSS:MozillaFirefox-translations-common SUSE Linux Enterprise Server 15-LTSS:MozillaFirefox-translations-other SUSE Linux Enterprise Server Teradata 12 SP3-LTSS:MozillaFirefox SUSE Linux Enterprise Server Teradata 12 SP3:MozillaFirefox SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-devel SUSE Linux Enterprise Server for SAP Applications 12 SP2:MozillaFirefox-translations-common SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-devel SUSE Linux Enterprise Server for SAP Applications 12 SP4:MozillaFirefox-translations-common SUSE Linux Enterprise Server for SAP Applications 12 SP5:MozillaFirefox SUSE Linux Enterprise Server for SAP Applications 15 SP1:MozillaFirefox SUSE Linux Enterprise Server for SAP Applications 15 SP1:MozillaFirefox-devel SUSE Linux Enterprise Server for SAP Applications 15 SP1:MozillaFirefox-translations-common SUSE Linux Enterprise Server for SAP Applications 15 SP1:MozillaFirefox-translations-other SUSE Linux Enterprise Server for SAP Applications 15 SP2:MozillaFirefox SUSE Linux Enterprise Server for SAP Applications 15 SP2:MozillaFirefox-devel SUSE Linux Enterprise Server for SAP Applications 15 SP2:MozillaFirefox-translations-common SUSE Linux Enterprise Server for SAP Applications 15 SP2:MozillaFirefox-translations-other SUSE Linux Enterprise Server for SAP Applications 15 SP3:MozillaFirefox SUSE Linux Enterprise Server for SAP Applications 15 SP3:MozillaFirefox-devel SUSE Linux Enterprise Server for SAP Applications 15 SP3:MozillaFirefox-translations-common SUSE Linux Enterprise Server for SAP Applications 15 SP3:MozillaFirefox-translations-other SUSE Linux Enterprise Software Development Kit 12 SP5:MozillaFirefox SUSE Linux Enterprise Software Development Kit 12 SP5:MozillaFirefox-devel SUSE OpenStack Cloud 9:MozillaFirefox SUSE OpenStack Cloud 9:MozillaFirefox-devel SUSE OpenStack Cloud 9:MozillaFirefox-translations-common SUSE OpenStack Cloud Crowbar 9:MozillaFirefox SUSE OpenStack Cloud Crowbar 9:MozillaFirefox-devel SUSE OpenStack Cloud Crowbar 9:MozillaFirefox-translations-common important 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H