Lucene search

K
vulnrichmentMozillaVULNRICHMENT:CVE-2024-2606
HistoryMar 19, 2024 - 12:02 p.m.

CVE-2024-2606

2024-03-1912:02:52
mozilla
github.com
5
vulnerability
invalid data
firefox

AI Score

5.9

Confidence

Low

SSVC

Exploitation

none

Automatable

no

Technical Impact

partial

Passing invalid data could have led to invalid wasm values being created, such as arbitrary integers turning into pointer values. This vulnerability affects Firefox < 124.

CNA Affected

[
  {
    "vendor": "Mozilla",
    "product": "Firefox",
    "versions": [
      {
        "status": "affected",
        "version": "unspecified",
        "lessThan": "124",
        "versionType": "custom"
      }
    ]
  }
]

AI Score

5.9

Confidence

Low

SSVC

Exploitation

none

Automatable

no

Technical Impact

partial