Lucene search

K
debiancveDebian Security Bug TrackerDEBIANCVE:CVE-2024-2608
HistoryMar 19, 2024 - 12:15 p.m.

CVE-2024-2608

2024-03-1912:15:08
Debian Security Bug Tracker
security-tracker.debian.org
19
integer overflow
firefox
thunderbird

0.0004 Low

EPSS

Percentile

10.3%

AppendEncodedAttributeValue(), ExtraSpaceNeededForAttrEncoding() and AppendEncodedCharacters() could have experienced integer overflows, causing underallocation of an output buffer leading to an out of bounds write. This vulnerability affects Firefox < 124, Firefox ESR < 115.9, and Thunderbird < 115.9.