Possible Use-After-Free Vulnerability Affecting Firefox < 129, Firefox ESR < 115.14, and Firefox ESR < 128.1

CVE-2024-7527

Summary

A vulnerability identified in Firefox and Thunderbird arises from unexpected marking actions at the beginning of a sweeping process, which may lead to a use-after-free condition. This flaw could potentially be exploited to manipulate memory, leading to unpredictable behavior or crashes. Users of affected versions of both Firefox and Thunderbird are advised to apply available security updates to mitigate this risk.

References