Security Advisory

CVE-2023-6865

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2023-12-19 13:38:47
Last updated 2025-02-13 17:26:38
Assigner mozilla
State PUBLISHED

Description

`EncryptingOutputStream` was susceptible to exposing uninitialized data. This issue could only be abused in order to write data to a local disk which may have implications for private browsing mode. This vulnerability affects Firefox ESR < 115.6 and Firefox < 121.