CVE-2023-6873: 
NixOS vulnerability analysis and mitigation

Memory safety bugs were discovered in Firefox 120, identified as CVE-2023-6873. These vulnerabilities showed evidence of memory corruption and could potentially be exploited to execute arbitrary code. The issue was disclosed on December 19, 2023, affecting Firefox versions prior to 121 (Mozilla Advisory).

The vulnerability has been assigned a CVSS v3.1 base score of 8.8 (High) with the vector string CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H. This indicates a network-accessible vulnerability requiring user interaction, with potential high impacts on confidentiality, integrity, and availability. The vulnerability is classified as CWE-787 (Out-of-bounds Write) (NVD).

The vulnerability could allow attackers to execute arbitrary code through memory corruption exploitation. The high severity rating indicates significant potential impact on system security, potentially compromising system integrity and user data (Mozilla Advisory).

The vulnerability has been patched in Firefox 121. Users and administrators are strongly advised to upgrade to this version or later. The fix has also been backported to various Linux distributions, including Debian and Ubuntu, through their respective security updates (Debian Advisory, Gentoo Advisory).