CVE-2024-5694

2024-06-1112:40:17

mozilla

github.com

javascript engine

use-after-free

memory

heap

vulnerability

firefox

AI Score

6.1

Confidence

Low

EPSS

0.001

Percentile

37.8%

SSVC

Exploitation

none

Automatable

Technical Impact

partial

JSON

An attacker could have caused a use-after-free in the JavaScript engine to read memory in the JavaScript string section of the heap. This vulnerability affects Firefox < 127.

CNA Affected

[
  {
    "vendor": "Mozilla",
    "product": "Firefox",
    "versions": [
      {
        "status": "affected",
        "version": "unspecified",
        "lessThan": "127",
        "versionType": "custom"
      }
    ]
  }
]