CVE-2024-7526

2024-08-0612:38:14

mozilla

github.com

cve-2024-7526

angle

parameter initialization

vulnerability

firefox

thunderbird

AI Score

Confidence

High

EPSS

0.001

Percentile

30.5%

SSVC

Exploitation

none

Automatable

yes

Technical Impact

partial

JSON

ANGLE failed to initialize parameters which lead to reading from uninitialized memory. This could be leveraged to leak sensitive data from memory. This vulnerability affects Firefox < 129, Firefox ESR < 115.14, Firefox ESR < 128.1, Thunderbird < 128.1, and Thunderbird < 115.14.

ADP Affected

[
  {
    "cpes": [
      "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*"
    ],
    "vendor": "mozilla",
    "product": "firefox",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "129",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "cpes": [
      "cpe:2.3:a:mozilla:firefox_esr:*:*:*:*:*:*:*:*"
    ],
    "vendor": "mozilla",
    "product": "firefox_esr",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "115.14",
        "versionType": "custom"
      },
      {
        "status": "affected",
        "version": "0",
        "lessThan": "128.1",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "cpes": [
      "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*"
    ],
    "vendor": "mozilla",
    "product": "thunderbird",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "128.1",
        "versionType": "custom"
      },
      {
        "status": "affected",
        "version": "0",
        "lessThan": "115.14",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  }
]