Mozilla Firefox security vulnerabilities

Mozilla Firefox is an open source web browser.Mozilla Thunderbird is a set of e-mail client software separate from the Mozilla Application Suite. A security bypass vulnerability exists in Mozilla Firefox and Thunderbird, which can be exploited by an attacker to bypass security restrictions caused...

CVE-2024-6614: Loop with Unreachable Exit Condition

The frame iterator could get stuck in a loop when encountering certain wasm frames leading to incorrect stack traces. This vulnerability affects Firefox 128 and Thunderbird 128...

SUSE CVE-2024-32228

FFmpeg 7.0 is vulnerable to Buffer Overflow. There is a SEGV at libavcodec/hevcdec.c:2947:22 in hevcframeend...

PT-2024-28468 · Mattermost · Mattermost

Name of the Vulnerable Software and Affected Versions: Mattermost versions 9.5.x through 9.5.5 Mattermost version 9.8.0 Description: The issue allows a high-privileged attacker with access to the audit logs to read message contents due to the failure to sanitize the RemoteClusterFrame payloads...

UBUNTU-CVE-2024-32228

FFmpeg 7.0 is vulnerable to Buffer Overflow. There is a SEGV at libavcodec/hevcdec.c:2947:22 in hevcframeend...

CVE-2024-21457

INformation disclosure while handling Multi-link IE in beacon frame...

CVE-2024-21458 Buffer Over-read in WLAN HOST

Information disclosure while handling SA query action frame...

CVE-2024-21458 Buffer Over-read in WLAN HOST

Information disclosure while handling SA query action frame...

CVE-2024-21457 Buffer Over-read in WLAN Host Communication

INformation disclosure while handling Multi-link IE in beacon frame...

CVE-2024-21457 Buffer Over-read in WLAN Host Communication

INformation disclosure while handling Multi-link IE in beacon frame...

CVE-2024-21457

CVE-2024-21457 corresponds to a buffer over-read causing information disclosure in WLAN host communication when handling Multi-link IE in beacon frames. Multiple connected sources tie it to Qualcomm WLAN components and Qualcomm/Pixel advisories. The Pixel bulletin lists CVE-2024-21457 under Qualc...

CVE-2024-21456

CVE-2024-21456 affects Qualcomm WLAN components (Qualcomm embedded platform) with information disclosure arising from parsing a beacon frame in a station. The linked sources describe a buffer-related issue in WLAN handling that can reveal information. The Android Pixel bulletin lists this CVE und...

CVE-2024-21456 Buffer Over-read in WLAN HOST

Information Disclosure while parsing beacon frame in STA...

CVE-2024-21456 Buffer Over-read in WLAN HOST

Information Disclosure while parsing beacon frame in STA...

CVE-2024-21458: Buffer Over-read

Information disclosure while handling SA query action frame...

CVE-2024-21456: Buffer Over-read

Information Disclosure while parsing beacon frame in STA...

CVE-2024-21457: Buffer Over-read

INformation disclosure while handling Multi-link IE in beacon frame...

PT-2024-13029 · Ibm · Ibm Sterling B2B Integrator Standard Edition

Name of the Vulnerable Software and Affected Versions: IBM Sterling B2B Integrator Standard Edition versions 6.1 and 6.2 Description: The issue arises from the software not restricting or incorrectly restricting frame objects or UI layers that belong to another application or domain. This can lea...

CVE-2024-38271

There exists a vulnerability in Quick Share/Nearby, where an attacker can force a victim to stay connected to a temporary hotspot created for the sharing. As part of the sequence of packets in a Quick Share connection over Bluetooth, the attacker forces the victim to connect to the attacker’s WiF...

Astra Linux – Vulnerability in Firefox

The frame iterator could get stuck in a loop when encountering certain Wasm frames, leading to incorrect stack traces. This vulnerability affects Firefox 128 and Thunderbird 128...