Memory Safety Bugs Affect Firefox, Firefox ESR, and Thunderbird
CVE-2024-4777

8.8HIGH

Key Information:

Vendor

Mozilla
Status
Firefox
Firefox Esr
Thunderbird
Vendor
CVE Published:
14 May 2024

What is CVE-2024-4777?

Multiple memory safety vulnerabilities were discovered in Firefox and Thunderbird, specifically in Firefox versions prior to 126, Firefox ESR before 115.11, and Thunderbird versions below 115.11. These vulnerabilities indicate potential memory corruption scenarios that could be exploited, allowing an attacker to execute arbitrary code. Users are urged to update to the latest versions to mitigate these risks.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

Firefox < 126

Firefox ESR < 115.11

Thunderbird < 115.11

References

https://bugzilla.mozilla.org/buglist.cgi?bug_id=1878199%2...
https://www.mozilla.org/security/advisories/mfsa2024-21/
https://www.mozilla.org/security/advisories/mfsa2024-22/

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Daniel Holbert and the Mozilla Fuzzing Team
JSON
.