Potential Use-After-Free Crash in Firefox
CVE-2024-4770

8.8HIGH

Key Information:

Vendor

Mozilla
Status
Firefox
Firefox Esr
Thunderbird
Vendor
CVE Published:
14 May 2024

What is CVE-2024-4770?

A vulnerability identified in Mozilla Firefox and Thunderbird may lead to a use-after-free condition when certain font styles are used while saving a page to PDF. This issue can potentially result in a crash of the application, affecting users of Firefox versions below 126 and Thunderbird versions below 115.11. Users are advised to update their software to ensure protection against this vulnerability.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

Firefox < 126

Firefox ESR < 115.11

Thunderbird < 115.11

References

https://bugzilla.mozilla.org/show_bug.cgi?id=1893270
https://www.mozilla.org/security/advisories/mfsa2024-21/
https://www.mozilla.org/security/advisories/mfsa2024-22/

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Irvan Kurniawan
JSON
.