CVE-2024-1552 — Incorrect Conversion between Numeric Types in Mozilla Firefox
Severity
7.5HIGHNVD
EPSS
0.3%
top 48.27%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedFeb 20
Latest updateMar 4
Description
Incorrect code generation could have led to unexpected numeric conversions and potential undefined behavior.*Note:* This issue only affects 32-bit ARM devices. This vulnerability affects Firefox < 123, Firefox ESR < 115.8, and Thunderbird < 115.8.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:NExploitability: 3.9 | Impact: 3.6
Affected Packages6 packages
Also affects: Debian Linux 10.0
🔴Vulnerability Details
3OSV▶
CVE-2024-1552: Incorrect code generation could have led to unexpected numeric conversions and potential undefined behavior↗2024-02-20
CVEList▶
CVE-2024-1552: Incorrect code generation could have led to unexpected numeric conversions and potential undefined behavior↗2024-02-20
GHSA▶
GHSA-372x-c6rw-v8f9: Incorrect code generation could have led to unexpected numeric conversions and potential undefined behavior↗2024-02-20
📋Vendor Advisories
8Microsoft▶
Incorrect code generation could have led to unexpected numeric conversions and potential undefined behavior.*Note:* This issue only affects 32-bit ARM devices. This vulnerability affects Firefox < 123↗2024-02-13
Debian▶
CVE-2024-1552: firefox - Incorrect code generation could have led to unexpected numeric conversions and p...↗2024