Lucene search

Veracode Vulnerability DatabaseVERACODE:45980

HistoryMar 24, 2024 - 12:09 p.m.

Out-of-bounds Read

2024-03-2412:09:29

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

out-of-bounds read

firefox

vulnerability

range-based bounds check

unauthorized access

javascript objects

security

6.5 Medium

AI Score

Confidence

Low

0.0005 Low

EPSS

Percentile

16.1%

JSON

Firefox is vulnerable to Out-of-bounds Read. The vulnerability is caused due to the manipulation of range-based bounds check elimination, allowing attackers to perform unauthorized access on JavaScript objects.

CPENameOperatorVersion
firefox:sideq81.0-2
firefox:sideq83.0-1
firefox:sideq82.0.3-1
firefox:sideq81.0-2
firefox:sideq83.0-1
firefox:sideq82.0.3-1

Name	Operator	Version
firefox:sid	eq	81.0-2
firefox:sid	eq	83.0-1
firefox:sid	eq	82.0.3-1
firefox:sid	eq	81.0-2
firefox:sid	eq	83.0-1
firefox:sid	eq	82.0.3-1

References

www.openwall.com/lists/oss-security/2024/03/23/1

bugzilla.mozilla.org/show_bug.cgi?id=1886849

security-tracker.debian.org/tracker/CVE-2024-29943

www.mozilla.org/security/advisories/mfsa2024-15/