CVE-2022-34480: Mozilla Firefox

High severity, CVSS 8.8. EPSS: 0.6% chance of exploitation in the next 30 days.

Within the <code>lg_init()</code> function, if several allocations succeed but then one fails, an uninitialized pointer would have been freed despite never being allocated. This vulnerability affects Firefox < 102.

Affected products

• Mozilla Firefox: before 102.0 (fixed in 102.0)

Published 2022-12-22. Last modified 2026-06-17.