Lucene search

K
debiancveDebian Security Bug TrackerDEBIANCVE:CVE-2024-3862
HistoryApr 16, 2024 - 4:15 p.m.

CVE-2024-3862

2024-04-1616:15:08
Debian Security Bug Tracker
security-tracker.debian.org
8
markstack
assignment operator
uninitialized memory
self-assignment
firefox
vulnerability
unix

6.1 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

9.1%

The MarkStack assignment operator, part of the JavaScript engine, could access uninitialized memory if it were used in a self-assignment. This vulnerability affects Firefox < 125.

OSVersionArchitecturePackageVersionFilename
Debian999allfirefox< 125.0.1-1firefox_125.0.1-1_all.deb

6.1 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

9.1%