Lucene search

MozillaVULNRICHMENT:CVE-2024-3855

HistoryApr 16, 2024 - 3:14 p.m.

CVE-2024-3855

2024-04-1615:14:06

mozilla

github.com

firefox

vulnerability

out-of-bounds

AI Score

5.7

Confidence

Low

SSVC

Exploitation

none

Automatable

Technical Impact

partial

JSON

In certain cases the JIT incorrectly optimized MSubstr operations, which led to out-of-bounds reads. This vulnerability affects Firefox < 125.

CNA Affected

[
  {
    "vendor": "Mozilla",
    "product": "Firefox",
    "versions": [
      {
        "status": "affected",
        "version": "unspecified",
        "lessThan": "125",
        "versionType": "custom"
      }
    ]
  }
]

References

bugzilla.mozilla.org/show_bug.cgi?id=1885828

www.mozilla.org/security/advisories/mfsa2024-18/