Arbitrary Memory Manipulation Flaw in Apple GPU Driver Affecting Mozilla Applications
CVE-2024-11691
Key Information:
- Vendor
Mozilla
- Vendor
- CVE Published:
- 26 November 2024
What is CVE-2024-11691?
A flaw has been discovered in the GPU driver for Apple M series devices that can lead to arbitrary memory manipulation through certain WebGL operations. This vulnerability primarily affects Mozilla applications including Firefox and Thunderbird running on Apple silicon, permitting potentially malicious actors to exploit the memory corruption risk. Users of affected Firefox and Thunderbird versions should update to the latest releases to mitigate this risk and ensure their data remains secure. Other platforms remain unaffected by this issue.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.
Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.
Affected Version(s)
Firefox < 133
Firefox ESR < 128.5
Firefox ESR < 115.18
References
Timeline
Vulnerability published
Vulnerability Reserved