CVE-2024-1557 — Out-of-bounds Write in Mozilla Firefox

Vendor	Product	Version range	Fixed in
debian	firefox	< firefox 123.0-1 (sid)	firefox 123.0-1 (sid)
mozilla	firefox	< 123.0	123.0
mozilla	firefox	—	—
mozilla	firefox	>= 0 < 123.0+build3-0ubuntu0.20.04.1	123.0+build3-0ubuntu0.20.04.1
mozilla	firefox	>= 0 < 123.0.1+build1-0ubuntu0.20.04.1	123.0.1+build1-0ubuntu0.20.04.1
mozilla	firefox	>= unspecified < 123	123

Ubuntu

Firefox regressions

vendor_ubuntu·2024-03-06·CVSS 7.5

[HIGH] Firefox regressions Title: Firefox regressions Summary: USN-6649-1 caused some minor regressions in Firefox. USN-6649-1 fixed vulnerabilities in Firefox. The update introduced several minor regressions. This update fixes the problem. Original advisory details: Multiple security issues were discovered in Firefox. If a user were tricked into opening a specially crafted website, an attacker could potentially exploit these to cause a denial of service, obtain sensitive information across domains, or execute arbitrary code. (CVE-2024-1547, CVE-2024-1548, CVE-2024-1549, CVE-2024-1550, CVE-2024-1553, CVE-2024-1554, CVE-2024-1555, CVE-2024-1557) Alfred Peters discovered that Firefox did not properly manage memory when storing and re-accessing data on a networking channel. An attacker could potentially exploit th

Ubuntu

Firefox vulnerabilities

vendor_ubuntu·2024-02-22·CVSS 7.5

CVE-2024-1550 [HIGH] Firefox vulnerabilities Title: Firefox vulnerabilities Summary: Several security issues were fixed in Firefox. Multiple security issues were discovered in Firefox. If a user were tricked into opening a specially crafted website, an attacker could potentially exploit these to cause a denial of service, obtain sensitive information across domains, or execute arbitrary code. (CVE-2024-1547, CVE-2024-1548, CVE-2024-1549, CVE-2024-1550, CVE-2024-1553, CVE-2024-1554, CVE-2024-1555, CVE-2024-1557) Alfred Peters discovered that Firefox did not properly manage memory when storing and re-accessing data on a networking channel. An attacker could potentially exploit this issue to cause a denial of service. (CVE-2024-1546) Johan Carlsson discovered that Firefox incorrectly handled Set-Cookie response headers in multipart

Debian

CVE-2024-1557: firefox - Memory safety bugs present in Firefox 122. Some of these bugs showed evidence of...

vendor_debian·2024·CVSS 8.1

CVE-2024-1557 [HIGH] CVE-2024-1557: firefox - Memory safety bugs present in Firefox 122. Some of these bugs showed evidence of... Memory safety bugs present in Firefox 122. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 123. Scope: local sid: resolved (fixed in 123.0-1)

Mozilla

Mozilla Foundation Security Advisory 2024-05: CVE-2024-1557

vendor_mozilla·CVSS 8.1

CVE-2024-1557 [HIGH] Mozilla Foundation Security Advisory 2024-05: CVE-2024-1557 Mozilla Foundation Security Advisory 2024-05 CVE: CVE-2024-1557 Product: Firefox Impact: high Fixed in: Firefox 123

OSV

firefox regressions

osv·2024-03-06·CVSS 7.5

CVE-2024-1547 [HIGH] firefox regressions firefox regressions USN-6649-1 fixed vulnerabilities in Firefox. The update introduced several minor regressions. This update fixes the problem. Original advisory details: Multiple security issues were discovered in Firefox. If a user were tricked into opening a specially crafted website, an attacker could potentially exploit these to cause a denial of service, obtain sensitive information across domains, or execute arbitrary code. (CVE-2024-1547, CVE-2024-1548, CVE-2024-1549, CVE-2024-1550, CVE-2024-1553, CVE-2024-1554, CVE-2024-1555, CVE-2024-1557) Alfred Peters discovered that Firefox did not properly manage memory when storing and re-accessing data on a networking channel. An attacker could potentially exploit this issue to cause a denial of service. (CVE-2024-1546) Johan Carlsson

OSV

firefox vulnerabilities

osv·2024-02-22·CVSS 7.5

CVE-2024-1547 [HIGH] firefox vulnerabilities firefox vulnerabilities Multiple security issues were discovered in Firefox. If a user were tricked into opening a specially crafted website, an attacker could potentially exploit these to cause a denial of service, obtain sensitive information across domains, or execute arbitrary code. (CVE-2024-1547, CVE-2024-1548, CVE-2024-1549, CVE-2024-1550, CVE-2024-1553, CVE-2024-1554, CVE-2024-1555, CVE-2024-1557) Alfred Peters discovered that Firefox did not properly manage memory when storing and re-accessing data on a networking channel. An attacker could potentially exploit this issue to cause a denial of service. (CVE-2024-1546) Johan Carlsson discovered that Firefox incorrectly handled Set-Cookie response headers in multipart HTTP responses. An attacker could potentially exploit this issue

OSV

CVE-2024-1557: Memory safety bugs present in Firefox 122

osv·2024-02-20·CVSS 8.1

CVE-2024-1557 [HIGH] CVE-2024-1557: Memory safety bugs present in Firefox 122 Memory safety bugs present in Firefox 122. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 123.

GHSA

GHSA-625h-2cj8-8g77: Memory safety bugs present in Firefox 122

ghsa_unreviewed·2024-02-20

CVE-2024-1557 [HIGH] CWE-787 GHSA-625h-2cj8-8g77: Memory safety bugs present in Firefox 122 Memory safety bugs present in Firefox 122. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 123.

CVE-2024-1557: Memory safety bugs present in Firefox 122. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could…

Affected

CVSS provenance