Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:47067
HistoryMay 20, 2024 - 12:17 p.m.

Invalid Memory Access

2024-05-2012:17:41
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
4
firefox
vulnerability
invalid memory access
built-in profiler
software
wasm code

CVSS3

5.9

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

AI Score

6.6

Confidence

Low

Firefox is vulnerable to invalid memory access. The vulnerability is due to a missing iterator stop condition when handling WASM code in the built-in profiler, which can lead to invalid memory access and undefined behavior

CVSS3

5.9

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

AI Score

6.6

Confidence

Low