CVE-2023-37212: 
NixOS vulnerability analysis and mitigation

CVE-2023-37212 is a high-severity memory safety vulnerability discovered in Firefox 114. The vulnerability was disclosed on July 4, 2023, and was identified by Andrew McCreight and the Mozilla Fuzzing Team. It affects Firefox versions prior to 115.0 (Mozilla Advisory).

The vulnerability is classified as a memory safety bug with a CVSS v3.1 base score of 8.8 (High), with the vector string CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H. The vulnerability is associated with CWE-787 (Out-of-bounds Write) and showed evidence of memory corruption that could potentially be exploited to run arbitrary code (NVD).

The vulnerability could potentially allow an attacker to execute arbitrary code on affected systems if successfully exploited. The high CVSS score indicates significant potential impacts on confidentiality, integrity, and availability of the affected system (Mozilla Advisory).

The vulnerability was fixed in Firefox version 115.0. Users are advised to upgrade to Firefox 115.0 or later to mitigate this security issue. For Ubuntu 20.04 LTS users, the fix is available in version 115.0+build2-0ubuntu0.20.04.3 (Ubuntu Notice).