CVE-2023-4048

CVE-2023-4048 describes an out-of-bounds read vulnerability in Mozilla Firefox versions prior to 116, Firefox ESR prior to 102.14, and Firefox ESR prior to 115.1. This flaw, triggered during HTML parsing with DOMParser in low memory conditions, could lead to an exploitable crash. Rated with a CVSS score of 7.5 (High), the vulnerability is network-exploitable with low attack complexity, requiring no user interaction, and primarily impacts availability. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or inclusion in CISA's KEV catalog. Community discussion and media coverage are minimal, suggesting limited public attention.