CVE-2022-22752: 
NixOS vulnerability analysis and mitigation

CVE-2022-22752 is a memory safety vulnerability discovered in Mozilla Firefox versions prior to 96.0. The vulnerability was reported by Mozilla developers Christian Holler and Jason Kratzer, who identified memory safety bugs present in Firefox 95. The issue was disclosed on January 11, 2022, and affects all Firefox installations before version 96 (Mozilla Advisory).

The vulnerability is classified with a CVSS v3.1 Base Score of 8.8 (HIGH) with the vector string CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H. The technical assessment indicates evidence of memory corruption in the affected components (NVD).

The vulnerability showed evidence of memory corruption which could potentially be exploited to run arbitrary code if sufficient effort was applied. This poses a significant security risk as it could allow attackers to execute malicious code within the context of the browser (Mozilla Advisory, SecurityWeek).

The vulnerability was addressed in Firefox version 96.0. Users were advised to update their Firefox installations to version 96.0 or later to receive the security fix. The update was made available through the standard Firefox update mechanism (Ubuntu Security).