Lucene search

Veracode Vulnerability DatabaseVERACODE:46534

HistoryApr 19, 2024 - 1:24 a.m.

Out-of-Bounds-Read

2024-04-1901:24:20

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

firefox vulnerability jit msubstr optimization out-of-bounds-read software

6.6 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

9.2%

JSON

firefox is vulnerable to Out-of-Bounds-Read. The vulnerability is due to the incorrect optimization of MSubstr operations by the JIT (Just-In-Time), leading to out-of-bounds reads in certain cases where MSubstr operations are incorrectly optimized.

CPENameOperatorVersion
firefox:sideq81.0-2
firefox:sideq83.0-1
firefox:sideq82.0.3-1
firefox:sideq81.0-2
firefox:sideq83.0-1
firefox:sideq82.0.3-1

Name	Operator	Version
firefox:sid	eq	81.0-2
firefox:sid	eq	83.0-1
firefox:sid	eq	82.0.3-1
firefox:sid	eq	81.0-2
firefox:sid	eq	83.0-1
firefox:sid	eq	82.0.3-1

References

bugzilla.mozilla.org/show_bug.cgi?id=1885828

security-tracker.debian.org/tracker/CVE-2024-3855

www.mozilla.org/security/advisories/mfsa2024-18/