CVE-2022-46885 | Vulnetix

CVE-2022-46885 PUBLISHED CVSS 8.8 HIGH

Reported by mozilla · Published December 22, 2022

Mozilla developers Timothy Nikkel, Ashley Hale, and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 105. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 106.

Fixed versions

Upgrade to a fixed version or later. Language registries are listed first, then Linux distributions, then vendor products.

Package	Ecosystem	Fixed in
Firefox	Mozilla	106.0, 106

Risk scores

CVSS 3.1

8.8

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected products

Vendor	Product	Versions
Mozilla	Firefox	unspecified
Mozilla	Firefox	*

Timeline

Dec 22, 2022 CVE Published
Dec 23, 2022 EPSS Score (30 in total, the first dated here)
Apr 15, 2025 CVE Updated
Apr 3, 2026 Security Advisory
May 24, 2026 Coalition ESS Score

Query this with the API

The same record, from the CLI:

vulnetix vdb vuln CVE-2022-46885
vulnetix vdb fixes CVE-2022-46885

Or with curl, using the org id and key from your account page:

curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
  "https://api.vdb.vulnetix.com/v2/vuln/CVE-2022-46885/fixes/registry"

The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart

References

Memory safety bugs fixed in Firefox 106

Look up in the Resolve Platform →