CVE-2024-2615 — Out-of-bounds Write in Mozilla Firefox

Vendor	Product	Version range	Fixed in
debian	firefox	< firefox 124.0-1 (sid)	firefox 124.0-1 (sid)
mozilla	firefox	< 124.0	124.0
mozilla	firefox	—	—
mozilla	firefox	>= 0 < 124.0+build1-0ubuntu0.20.04.1	124.0+build1-0ubuntu0.20.04.1
mozilla	firefox	>= unspecified < 124	124

Ubuntu

Firefox vulnerabilities

vendor_ubuntu·2024-03-20·CVSS 6.5

CVE-2024-2610 [MEDIUM] Firefox vulnerabilities Title: Firefox vulnerabilities Summary: Several security issues were fixed in Firefox. Multiple security issues were discovered in Firefox. If a user were tricked into opening a specially crafted website, an attacker could potentially exploit these to cause a denial of service, obtain sensitive information across domains, or execute arbitrary code. (CVE-2024-2609, CVE-2024-2611, CVE-2024-2614, CVE-2024-2615) Hubert Kario discovered that Firefox had a timing side-channel when performing RSA decryption. A remote attacker could possibly use this issue to recover sensitive information. (CVE-2023-5388) It was discovered that Firefox did not properly handle WASM register values in some circumstances. An attacker could potentially exploit this issue to cause a denial of service. (CVE-2024-260

Debian

CVE-2024-2615: firefox - Memory safety bugs present in Firefox 123. Some of these bugs showed evidence of...

vendor_debian·2024·CVSS 9.8

CVE-2024-2615 [CRITICAL] CVE-2024-2615: firefox - Memory safety bugs present in Firefox 123. Some of these bugs showed evidence of... Memory safety bugs present in Firefox 123. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 124. Scope: local sid: resolved (fixed in 124.0-1)

Mozilla

Mozilla Foundation Security Advisory 2024-12: CVE-2024-2615

vendor_mozilla·CVSS 9.8

CVE-2024-2615 [CRITICAL] Mozilla Foundation Security Advisory 2024-12: CVE-2024-2615 Mozilla Foundation Security Advisory 2024-12 CVE: CVE-2024-2615 Product: Firefox Impact: critical Fixed in: Firefox 124

OSV

firefox vulnerabilities

osv·2024-03-20·CVSS 6.5

CVE-2024-2609 [MEDIUM] firefox vulnerabilities firefox vulnerabilities Multiple security issues were discovered in Firefox. If a user were tricked into opening a specially crafted website, an attacker could potentially exploit these to cause a denial of service, obtain sensitive information across domains, or execute arbitrary code. (CVE-2024-2609, CVE-2024-2611, CVE-2024-2614, CVE-2024-2615) Hubert Kario discovered that Firefox had a timing side-channel when performing RSA decryption. A remote attacker could possibly use this issue to recover sensitive information. (CVE-2023-5388) It was discovered that Firefox did not properly handle WASM register values in some circumstances. An attacker could potentially exploit this issue to cause a denial of service. (CVE-2024-2606) Gary Kwong discovered that Firefox incorrectly updated retur

GHSA

GHSA-6h2q-2x4r-5652: Memory safety bugs present in Firefox 123

ghsa_unreviewed·2024-03-19

CVE-2024-2615 [CRITICAL] CWE-787 GHSA-6h2q-2x4r-5652: Memory safety bugs present in Firefox 123 Memory safety bugs present in Firefox 123. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 124.

OSV

CVE-2024-2615: Memory safety bugs present in Firefox 123

osv·2024-03-19·CVSS 9.8

CVE-2024-2615 [CRITICAL] CVE-2024-2615: Memory safety bugs present in Firefox 123 Memory safety bugs present in Firefox 123. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 124.

CVE-2024-2615: Memory safety bugs present in Firefox 123. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could…

Affected

CVSS provenance