Lucene search

Debian Security Bug TrackerDEBIANCVE:CVE-2024-4775

HistoryMay 14, 2024 - 6:15 p.m.

CVE-2024-4775

2024-05-1418:15:15

Debian Security Bug Tracker

security-tracker.debian.org

webassembly

built-in profiler

invalid memory access

firefox < 126

iterator stop condition

undefined behavior

CVSS3

5.9

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

AI Score

6.9

Confidence

Low

EPSS

Percentile

9.0%

JSON

An iterator stop condition was missing when handling WASM code in the built-in profiler, potentially leading to invalid memory access and undefined behavior. Note: This issue only affects the application when the profiler is running. This vulnerability affects Firefox < 126.

OSVersionArchitecturePackageVersionFilename
Debian999allfirefox< 126.0-1firefox_126.0-1_all.deb

OS	Version	Architecture	Package	Version	Filename
Debian	999	all	firefox	< 126.0-1	firefox_126.0-1_all.deb

CVSS3

5.9

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

AI Score

6.9

Confidence

Low

EPSS

Percentile

9.0%

JSON

Related for DEBIANCVE:CVE-2024-4775