Lucene search

K
cvelistMozillaCVELIST:CVE-2024-3855
HistoryApr 16, 2024 - 3:14 p.m.

CVE-2024-3855

2024-04-1615:14:06
mozilla
www.cve.org
3
jit
msubstr
vulnerability
firefox 125

AI Score

5.9

Confidence

Low

EPSS

0

Percentile

9.0%

In certain cases the JIT incorrectly optimized MSubstr operations, which led to out-of-bounds reads. This vulnerability affects Firefox < 125.

CNA Affected

[
  {
    "product": "Firefox",
    "vendor": "Mozilla",
    "versions": [
      {
        "lessThan": "125",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

AI Score

5.9

Confidence

Low

EPSS

0

Percentile

9.0%