{"affected":[{"affectedData":[{"product":"Firefox","vendor":"Mozilla","versions":[{"lessThan":"116","status":"affected","version":"unspecified","versionType":"custom"}]},{"product":"Firefox ESR","vendor":"Mozilla","versions":[{"lessThan":"102.14","status":"affected","version":"unspecified","versionType":"custom"}]},{"product":"Firefox ESR","vendor":"Mozilla","versions":[{"lessThan":"115.1","status":"affected","version":"unspecified","versionType":"custom"}]}],"source":"security@mozilla.org"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","matchCriteriaId":"C6C6420C-0883-4585-A655-4C470029CB85","versionEndExcluding":"116.0","vulnerable":true},{"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","matchCriteriaId":"FE961FDE-D5BE-40C3-8F2D-3952F6A9FC46","versionEndExcluding":"102.14","versionStartIncluding":"102.0","vulnerable":true},{"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*","matchCriteriaId":"EACD3AEC-1B8F-41F1-9AFF-4FED63609109","versionEndExcluding":"115.1","versionStartIncluding":"115.0","vulnerable":true}],"negate":false,"operator":"OR"}]},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*","matchCriteriaId":"FA6FEEC2-9F11-4643-8827-749718254FED","vulnerable":true},{"criteria":"cpe:2.3:o:debian:debian_linux:12.0:*:*:*:*:*:*:*","matchCriteriaId":"46D69DCC-AE4D-4EA5-861C-D60951444C6C","vulnerable":true}],"negate":false,"operator":"OR"}]}],"cveTags":[],"descriptions":[{"lang":"en","value":"Race conditions in reference counting code were found through code inspection. These could have resulted in potentially exploitable use-after-free vulnerabilities. This vulnerability affects Firefox < 116, Firefox ESR < 102.14, and Firefox ESR < 115.1."},{"lang":"es","value":"Se encontraron condiciones de carrera en el código de conteo de referencias mediante inspección de código. Estas podrían haber resultado en vulnerabilidades de uso después de liberación potencialmente explotables. Esta vulnerabilidad afecta a Firefox < 116, Firefox ESR anterior a 102.14 y Firefox ESR anterior a 115.1."}],"id":"CVE-2023-4049","lastModified":"2026-10-23T23:10:00.157","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"HIGH","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":5.9,"baseSeverity":"MEDIUM","confidentialityImpact":"NONE","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","version":"3.1"},"exploitabilityScore":2.2,"impactScore":3.6,"source":"nvd@nist.gov","type":"Primary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2023-4049","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2024-10-22T15:10:50.908793Z","version":"2.0.3"}}]},"published":"2023-08-01T15:15:10.030","references":[{"source":"security@mozilla.org","tags":["Issue Tracking","Permissions Required"],"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=1842658"},{"source":"security@mozilla.org","url":"https://lists.debian.org/debian-lts-announce/2023/08/msg00008.html"},{"source":"security@mozilla.org","url":"https://lists.debian.org/debian-lts-announce/2023/08/msg00010.html"},{"source":"security@mozilla.org","tags":["Third Party Advisory"],"url":"https://www.debian.org/security/2023/dsa-5464"},{"source":"security@mozilla.org","tags":["Third Party Advisory"],"url":"https://www.debian.org/security/2023/dsa-5469"},{"source":"security@mozilla.org","tags":["Vendor Advisory"],"url":"https://www.mozilla.org/security/advisories/mfsa2023-29/"},{"source":"security@mozilla.org","tags":["Vendor Advisory"],"url":"https://www.mozilla.org/security/advisories/mfsa2023-30/"},{"source":"security@mozilla.org","tags":["Vendor Advisory"],"url":"https://www.mozilla.org/security/advisories/mfsa2023-31/"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Permissions Required"],"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=1842658"},{"source":"af854a3a-2127-422b-91ae-364da2661108","url":"https://lists.debian.org/debian-lts-announce/2023/08/msg00008.html"},{"source":"af854a3a-2127-422b-91ae-364da2661108","url":"https://lists.debian.org/debian-lts-announce/2023/08/msg00010.html"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"],"url":"https://www.debian.org/security/2023/dsa-5464"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"],"url":"https://www.debian.org/security/2023/dsa-5469"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"url":"https://www.mozilla.org/security/advisories/mfsa2023-29/"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"url":"https://www.mozilla.org/security/advisories/mfsa2023-30/"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"url":"https://www.mozilla.org/security/advisories/mfsa2023-31/"}],"sourceIdentifier":"security@mozilla.org","vulnStatus":"Modified","weaknesses":[{"description":[{"lang":"en","value":"CWE-362"}],"source":"nvd@nist.gov","type":"Primary"}]}