Apple macOS Marches Forward Despite Critical GPU Driver Flaw

CVE-2024-11691

Currently unrated 🤨

Key Information

Vendor: Mozilla
Status: Firefox; Firefox Esr; Thunderbird
Vendor: CVE Published:; 26 November 2024

Summary

Certain WebGL operations on Apple silicon M series devices could have lead to an out-of-bounds write and memory corruption due to a flaw in Apple's GPU driver.
This bug only affected the application on Apple M series hardware. Other platforms were unaffected. This vulnerability affects Firefox < 133, Firefox ESR < 128.5, Firefox ESR < 115.18, Thunderbird < 133, Thunderbird < 128.5, and Thunderbird < 115.18.

Affected Version(s)

Firefox < 133

Firefox ESR < 128.5

Firefox ESR < 115.18

Refferences

https://bugzilla.mozilla.org/show_bug.cgi?id=1914707

https://bugzilla.mozilla.org/show_bug.cgi?id=1924184

https://www.mozilla.org/security/advisories/mfsa2024-63/

https://www.mozilla.org/security/advisories/mfsa2024-64/

https://www.mozilla.org/security/advisories/mfsa2024-65/

https://www.mozilla.org/security/advisories/mfsa2024-67/

https://www.mozilla.org/security/advisories/mfsa2024-68/

https://www.mozilla.org/security/advisories/mfsa2024-70/

Timeline

Vulnerability published
Nov 26, 2024
Vulnerability Reserved
Nov 25, 2024

Collectors

NVD DatabaseMitre Database

Credit

Dohyun Lee (@l33d0hyun) of USELab, Korea University & Youngho Choi of CEL, Korea University & Geumhwan Cho of USELab, Korea University

.