CVE-2024-3860

2024-04-1615:14:07

mozilla

github.com

out-of-memory

object initialization

empty shape list

jit

firefox vulnerability

version 125

AI Score

6.1

Confidence

Low

SSVC

Exploitation

none

Automatable

Technical Impact

partial

JSON

An out-of-memory condition during object initialization could result in an empty shape list. If the JIT subsequently traced the object it would crash. This vulnerability affects Firefox < 125.

CNA Affected

[
  {
    "vendor": "Mozilla",
    "product": "Firefox",
    "versions": [
      {
        "status": "affected",
        "version": "unspecified",
        "lessThan": "125",
        "versionType": "custom"
      }
    ]
  }
]