Lucene search

K
debiancveDebian Security Bug TrackerDEBIANCVE:CVE-2024-3853
HistoryApr 16, 2024 - 4:15 p.m.

CVE-2024-3853

2024-04-1616:15:08
Debian Security Bug Tracker
security-tracker.debian.org
19
javascript realm initialization
garbage collection
unix

CVSS3

7.5

Attack Vector

ADJACENT

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

6.1

Confidence

Low

EPSS

0

Percentile

9.0%

A use-after-free could result if a JavaScript realm was in the process of being initialized when a garbage collection started. This vulnerability affects Firefox < 125.

OSVersionArchitecturePackageVersionFilename
Debian999allfirefox< 125.0.1-1firefox_125.0.1-1_all.deb

CVSS3

7.5

Attack Vector

ADJACENT

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

6.1

Confidence

Low

EPSS

0

Percentile

9.0%