Lucene search

K
redhatcveRedhat.comRH:CVE-2024-2608
HistoryMar 21, 2024 - 11:39 a.m.

CVE-2024-2608

2024-03-2111:39:32
redhat.com
access.redhat.com
6
cve-2024-2608
mozilla foundation
integer overflow
security advisory
out of bounds write
appendencodedattributevalue
extraspaceneededforattrencoding
appendencodedcharacters

7.3 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

10.3%

The Mozilla Foundation Security Advisory describes this flaw as: AppendEncodedAttributeValue(), ExtraSpaceNeededForAttrEncoding() and AppendEncodedCharacters() could have experienced integer overflows, causing underallocation of an output buffer leading to an out of bounds write.