CVE-2024-3853

2024-04-1615:14:05

mozilla

www.cve.org

javascript realm

garbage collection

firefox vulnerability

6 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

9.1%

JSON

A use-after-free could result if a JavaScript realm was in the process of being initialized when a garbage collection started. This vulnerability affects Firefox < 125.

CNA Affected

[
  {
    "product": "Firefox",
    "vendor": "Mozilla",
    "versions": [
      {
        "lessThan": "125",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]