Lucene search

K
ubuntucveUbuntu.comUB:CVE-2024-4774
HistoryMay 14, 2024 - 12:00 a.m.

CVE-2024-4774

2024-05-1400:00:00
ubuntu.com
ubuntu.com
3
shmemcharmaphashentry
firefox
vulnerability
move semantics
undefined behavior
version 126

6.8 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

9.1%

The ShmemCharMapHashEntry() code was susceptible to potentially undefined
behavior by bypassing the move semantics for one of its data members. This
vulnerability affects Firefox < 126.

Notes

Author Note
tyhicks mozjs contains a copy of the SpiderMonkey JavaScript engine
mdeslaur starting with Ubuntu 22.04, the firefox package is just a script that installs the Firefox snap starting with Ubuntu 24.04, the thunderbird package is just a script that installs the Thunderbird snap

6.8 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

9.1%