CVE-2022-29918: 
NixOS vulnerability analysis and mitigation

CVE-2022-29918 is a high-severity memory safety vulnerability discovered in Firefox 99. The vulnerability was reported by Mozilla developers Gabriele Svelto, Randell Jesup, and the Mozilla Fuzzing Team, and was subsequently fixed in Firefox 100. The issue was publicly disclosed on May 3, 2022, as part of Mozilla Foundation Security Advisory 2022-16 (Mozilla Advisory).

The vulnerability involves memory safety bugs that showed evidence of memory corruption in Firefox 99. The issue received a CVSS 3.1 base score of 8.8 (High), with attack vector being network-based, low attack complexity, requiring no privileges but user interaction, and having high impact on confidentiality, integrity, and availability (Ubuntu CVE).

The memory safety bugs demonstrated evidence of memory corruption which could potentially be exploited to execute arbitrary code on affected systems. Security researchers indicated that with sufficient effort, these vulnerabilities could be weaponized to compromise affected Firefox installations (Mozilla Advisory).

The vulnerability was addressed in Firefox 100. Users of affected versions were advised to update their Firefox installations to version 100 or later. The fix was also deployed to various Linux distributions including Ubuntu 21.10, 20.04 LTS, and 18.04 LTS through their respective package updates (Ubuntu Security).