Lucene search

K
vulnrichmentMozillaVULNRICHMENT:CVE-2024-8394
HistorySep 06, 2024 - 4:16 p.m.

CVE-2024-8394

2024-09-0616:16:34
mozilla
github.com
2
vulnerability
thunderbird
otr chat

AI Score

6.7

Confidence

High

EPSS

0.001

Percentile

17.7%

SSVC

Exploitation

none

Automatable

no

Technical Impact

partial

When aborting the verification of an OTR chat session, an attacker could have caused a use-after-free bug leading to a potentially exploitable crash. This vulnerability affects Thunderbird < 128.2.

AI Score

6.7

Confidence

High

EPSS

0.001

Percentile

17.7%

SSVC

Exploitation

none

Automatable

no

Technical Impact

partial