CVE-2024-7528

2024-08-0613:15:57

Alpine Linux Development Team

security.alpinelinux.org

indexeddb

use-after-free

firefox

thunderbird

vulnerability

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

AI Score

6.1

Confidence

Low

EPSS

0.001

Percentile

30.4%

JSON

Incorrect garbage collection interaction in IndexedDB could have led to a use-after-free. This vulnerability affects Firefox < 129, Firefox ESR < 128.1, and Thunderbird < 128.1.

OSVersionArchitecturePackageVersionFilename
Alpine3.20-communitynoarchfirefox= 128.0.3-r0UNKNOWN
Alpine3.20-communitynoarchfirefox-esr= 115.13.0-r0UNKNOWN
Alpine3.20-communitynoarchthunderbird= 128.0.1-r0UNKNOWN
Alpineedge-communitynoarchfirefox-esr= 115.15.0-r0UNKNOWN

OS	Version	Architecture	Package	Version	Filename
Alpine	3.20-community	noarch	firefox	= 128.0.3-r0	UNKNOWN
Alpine	3.20-community	noarch	firefox-esr	= 115.13.0-r0	UNKNOWN
Alpine	3.20-community	noarch	thunderbird	= 128.0.1-r0	UNKNOWN
Alpine	edge-community	noarch	firefox-esr	= 115.15.0-r0	UNKNOWN