CVE-2024-2616 — Out-of-bounds Write in Mozilla Firefox ESR
Severity
2.7LOWNVD
EPSS
0.0%
top 87.57%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedMar 19
Latest updateMar 26
Description
To harden ICU against exploitation, the behavior for out-of-memory conditions was changed to crash instead of attempt to continue. This vulnerability affects Firefox ESR < 115.9 and Thunderbird < 115.9.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:LExploitability: 1.2 | Impact: 1.4
Affected Packages5 packages
🔴Vulnerability Details
3CVEList▶
CVE-2024-2616: To harden ICU against exploitation, the behavior for out-of-memory conditions was changed to crash instead of attempt to continue↗2024-03-19
OSV▶
CVE-2024-2616: To harden ICU against exploitation, the behavior for out-of-memory conditions was changed to crash instead of attempt to continue↗2024-03-19
GHSA▶
GHSA-r78f-49fx-h798: To harden ICU against exploitation, the behavior for out-of-memory conditions was changed to crash instead of attempt to continue↗2024-03-19
📋Vendor Advisories
5Debian▶
CVE-2024-2616: firefox-esr - To harden ICU against exploitation, the behavior for out-of-memory conditions wa...↗2024