CVE-2022-34476: Mozilla Firefox

Critical severity, CVSS 9.8. EPSS: 0.7% chance of exploitation in the next 30 days.

ASN.1 parsing of an indefinite SEQUENCE inside an indefinite GROUP could have resulted in the parser accepting malformed ASN.1. This vulnerability affects Firefox < 102.

Affected products

• Mozilla Firefox: before 102.0 (fixed in 102.0)

Published 2022-12-22. Last modified 2026-06-17.