Firefox Vulnerability Affects Users of < 130 and Firefox ESR < 128.2

CVE-2024-8385

9.8CRITICAL

Key Information

Vendor: Mozilla
Status: Firefox; Firefox Esr; Thunderbird
Vendor: CVE Published:; 3 September 2024

Summary

A difference in the handling of StructFields and ArrayTypes in WASM could be used to trigger an exploitable type confusion vulnerability. This vulnerability affects Firefox < 130, Firefox ESR < 128.2, and Thunderbird < 128.2.

Affected Version(s)

Firefox < 130

Firefox ESR < 128.2

Thunderbird < 128.2

CVSS V3.1

Score:

9.8

Severity:

CRITICAL

Confidentiality:

High

Integrity:

High

Availability:

High

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

None

User Interaction:

None

Scope:

Unchanged

Timeline

Vulnerability Reserved.
Sep 3, 2024
Vulnerability published.
Sep 3, 2024

Collectors

NVD DatabaseMitre Database

Credit

Seunghyun Lee