CLEANSTART-2024-TM53747 type confusion vulnerability can occur when manipulating JavaScript objects due to issues in Array

🗓️ 31 Oct 2026 08:51:17Reported by GoogleType

osv_cleanstart🔗 osv.dev👁 5 Views

Type confusion in the firefox-esr package via JavaScript object manipulation in Array.

Reporter	Title	Published	Views	Family All 241
IBM Security Bulletins	Security Bulletin: WebSphere Cast Iron and App Connect Professional are affected by vulnerabilities in busybox, arpwatch, apr, acpid, augeas, firefox, ctdb.	15 Dec 202107:41	–	ibm
IBM Security Bulletins	Security Bulletin: Mozilla Firefox vulnerability in IBM SONAS (CVE-2019-11707)	9 Jul 201918:05	–	ibm
IBM Security Bulletins	Security Bulletin: One vulnerability of Mozzila Firefox (less than Firefox 60.7.1 ESR) has affected Synthetic Playback Agent 8.1.4.0 - 8.1.4 IF07	20 Dec 201908:47	–	ibm
FreeBSD	mozilla -- multiple vulnerabilities	18 Jun 201900:00	–	freebsd
FreeBSD	Mozilla -- multiple vulnerabilities	20 Jun 201900:00	–	freebsd
ALT Linux	Security fix for the ALT Linux 10 package thunderbird version 60.7.2-alt1	22 Jun 201900:00	–	altlinux
ALT Linux	Security fix for the ALT Linux 10 package firefox-esr version 60.7.1-alt1	18 Jun 201900:00	–	altlinux
zdt	Mozilla Spidermonkey - IonMonkey (Array.prototype.pop) Type Confusion Exploit	26 Jun 201900:00	–	zdt
zdt	Mozilla Firefox 67 - Array.pop JIT Type Confusion Exploit	2 Feb 202200:00	–	zdt
GithubExploit	Exploit for Type Confusion in Mozilla Firefox	23 Sep 202603:17	–	githubexploit

Source	Link
github	www.github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2024/CLEANSTART-2024-TM53747.json
osv	www.osv.dev/vulnerability/CVE-2019-11707
nvd	www.nvd.nist.gov/vuln/detail/CVE-2019-11707

31 Oct 2026 16:02Current

7.9High risk

Vulners AI Score7.9

CVSS 3.18.8

EPSS0.37951

firefox-esr type confusion JavaScript Array