CVE-2024-29943
published 2024-03-22CVE-2024-29943: An attacker was able to perform an out-of-bounds read or write on a JavaScript object by fooling range-based bounds check elimination. This vulnerability…
PriorityP263critical9.8CVSS 3.1
AVNACLPRNUINSUCHIHAH
EPSS
22.93%
97.5th percentile
An attacker was able to perform an out-of-bounds read or write on a JavaScript object by fooling range-based bounds check elimination. This vulnerability affects Firefox < 124.0.1.
Affected
7 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | firefox | < firefox 124.0.1-1 (sid) | firefox 124.0.1-1 (sid) |
| mozilla | firefox | < 124.0.1 | 124.0.1 |
| mozilla | firefox | — | — |
| mozilla | firefox | >= 0 < 124.0.2+build1-0ubuntu0.20.04.1 | 124.0.2+build1-0ubuntu0.20.04.1 |
| mozilla | firefox | >= 0 < 124.0.1+build1-0ubuntu0.20.04.1 | 124.0.1+build1-0ubuntu0.20.04.1 |
| mozilla | firefox | >= unspecified < 124.0.1 | 124.0.1 |
| msrc | azl3_mozjs_102.15.1-1_on_azure_linux_3.0 | — | — |
Detection & IOCsextracted from sources · hover to see the quote
- →Target Firefox versions below 124.0.1 (standard) and 115.9.1 (ESR) for CVE-2024-29943; look for exploitation of range-based bounds check elimination in the JavaScript engine leading to OOB read/write on JS objects ↗
- →CVE-2024-29943 was chained with CVE-2024-29944 (privileged JS execution via event handlers) to achieve full RCE + sandbox escape; detections should consider both CVEs appearing together in exploit chains ↗
- →The vulnerability is an out-of-bounds write triggered through range analysis bounds-check elimination in Firefox's JS engine; monitor for abnormal JS JIT compiler behavior or memory corruption signals in Firefox content processes ↗
- ·Patches were released in Firefox 124.0.1 and Firefox ESR 115.9.1; only desktop versions are affected — no mobile patch was mentioned for this CVE ↗
CVSS provenance
nvdv3.19.8CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
osv9.8CRITICAL
vendor_debian9.8CRITICAL
vendor_msrc9.8CRITICAL
vendor_redhat9.8CRITICAL
vendor_ubuntu9.8CRITICAL
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Ubuntu
Firefox regressions
vendor_ubuntu·2024-04-04·CVSS 9.8
CVE-2024-29943 [CRITICAL] Firefox regressions
Title: Firefox regressions
Summary: USN-6710-1 caused some minor regressions in Firefox.
USN-6710-1 fixed vulnerabilities in Firefox. The update introduced
several minor regressions. This update fixes the problem.
Original advisory details:
Manfred Paul discovered that Firefox did not properly perform bounds
checking during range analysis, leading to an out-of-bounds write
vulnerability. A attacker could use this to cause a denial of service,
or execute arbitrary code. (CVE-2024-29943)
Manfred Paul discovered that Firefox incorrectly handled MessageManager
listeners under certain circumstances. An attacker who was able to inject
an event handler into a privileged object may have been able to execute
arbitrary code. (CVE-2024-29944)
Instructions: After a standard system update you nee
Ubuntu
Firefox vulnerabilities
vendor_ubuntu·2024-03-25·CVSS 9.8
CVE-2024-29944 [CRITICAL] Firefox vulnerabilities
Title: Firefox vulnerabilities
Summary: Several security issues were fixed in Firefox.
Manfred Paul discovered that Firefox did not properly perform bounds
checking during range analysis, leading to an out-of-bounds write
vulnerability. A attacker could use this to cause a denial of service,
or execute arbitrary code. (CVE-2024-29943)
Manfred Paul discovered that Firefox incorrectly handled MessageManager
listeners under certain circumstances. An attacker who was able to inject
an event handler into a privileged object may have been able to execute
arbitrary code. (CVE-2024-29944)
Instructions: After a standard system update you need to restart Firefox to make all the
necessary changes.
Red Hat
Mozilla: Out-of-bounds access via Range Analysis bypass
vendor_redhat·2024-03-22·CVSS 9.8
CVE-2024-29943 [CRITICAL] CWE-125 Mozilla: Out-of-bounds access via Range Analysis bypass
Mozilla: Out-of-bounds access via Range Analysis bypass
An attacker was able to perform an out-of-bounds read or write on a JavaScript object by fooling range-based bounds check elimination. This vulnerability affects Firefox < 124.0.1.
A flaw was found in Mozilla. The Mozilla Foundation Security Advisory describes this flaw as follows: An attacker was able to perform an out-of-bounds read or write on a JavaScript object by fooling range-based bounds check elimination.
Statement: Red Hat Enterprise Linux ships Firefox Extended Support Release (ESR) and therefore it is not affected by this CVE.
Package: firefox (Red Hat Enterprise Linux 6) - Not affected
Package: firefox (Red Hat Enterprise Linux 7) - Not affected
Package: firefox (Red Hat Enterprise Linux 8) - Not affected
Package:
Microsoft
An attacker was able to perform an out-of-bounds read or write on a JavaScript object by fooling range-based bounds check elimination. This vulnerability affects Firefox < 124.0.1.
vendor_msrc·2024-03-12·CVSS 9.8
CVE-2024-29943 [CRITICAL] CWE-125 An attacker was able to perform an out-of-bounds read or write on a JavaScript object by fooling range-based bounds check elimination. This vulnerability affects Firefox < 124.0.1.
An attacker was able to perform an out-of-bounds read or write on a JavaScript object by fooling range-based bounds check elimination. This vulnerability affects Firefox Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?
One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See this blog post for more information. If impact to additional products is identified, we will update the CVE to reflect this.
Mariner: Marin
Debian
CVE-2024-29943: firefox - An attacker was able to perform an out-of-bounds read or write on a JavaScript o...
vendor_debian·2024·CVSS 9.8
CVE-2024-29943 [CRITICAL] CVE-2024-29943: firefox - An attacker was able to perform an out-of-bounds read or write on a JavaScript o...
An attacker was able to perform an out-of-bounds read or write on a JavaScript object by fooling range-based bounds check elimination. This vulnerability affects Firefox < 124.0.1.
Scope: local
sid: resolved (fixed in 124.0.1-1)
Mozilla
Mozilla Foundation Security Advisory 2024-15: CVE-2024-29943
vendor_mozilla·CVSS 9.8
CVE-2024-29943 [CRITICAL] Mozilla Foundation Security Advisory 2024-15: CVE-2024-29943
Mozilla Foundation Security Advisory 2024-15
CVE: CVE-2024-29943
Product: Firefox
Impact: critical
Fixed in: Firefox 124.0.1
OSV
firefox regressions
osv·2024-04-04·CVSS 9.8
CVE-2024-29943 [CRITICAL] firefox regressions
firefox regressions
USN-6710-1 fixed vulnerabilities in Firefox. The update introduced
several minor regressions. This update fixes the problem.
Original advisory details:
Manfred Paul discovered that Firefox did not properly perform bounds
checking during range analysis, leading to an out-of-bounds write
vulnerability. A attacker could use this to cause a denial of service,
or execute arbitrary code. (CVE-2024-29943)
Manfred Paul discovered that Firefox incorrectly handled MessageManager
listeners under certain circumstances. An attacker who was able to inject
an event handler into a privileged object may have been able to execute
arbitrary code. (CVE-2024-29944)
OSV
firefox vulnerabilities
osv·2024-03-25·CVSS 9.8
CVE-2024-29943 [CRITICAL] firefox vulnerabilities
firefox vulnerabilities
Manfred Paul discovered that Firefox did not properly perform bounds
checking during range analysis, leading to an out-of-bounds write
vulnerability. A attacker could use this to cause a denial of service,
or execute arbitrary code. (CVE-2024-29943)
Manfred Paul discovered that Firefox incorrectly handled MessageManager
listeners under certain circumstances. An attacker who was able to inject
an event handler into a privileged object may have been able to execute
arbitrary code. (CVE-2024-29944)
GHSA
GHSA-gv5g-5832-j3rm: An attacker was able to perform an out-of-bounds read or write on a JavaScript object by fooling range-based bounds check elimination
ghsa_unreviewed·2024-03-22
CVE-2024-29943 [CRITICAL] CWE-125 GHSA-gv5g-5832-j3rm: An attacker was able to perform an out-of-bounds read or write on a JavaScript object by fooling range-based bounds check elimination
An attacker was able to perform an out-of-bounds read or write on a JavaScript object by fooling range-based bounds check elimination. This vulnerability affects Firefox < 124.0.1.
OSV
CVE-2024-29943: An attacker was able to perform an out-of-bounds read or write on a JavaScript object by fooling range-based bounds check elimination
osv·2024-03-22·CVSS 9.8
CVE-2024-29943 [CRITICAL] CVE-2024-29943: An attacker was able to perform an out-of-bounds read or write on a JavaScript object by fooling range-based bounds check elimination
An attacker was able to perform an out-of-bounds read or write on a JavaScript object by fooling range-based bounds check elimination. This vulnerability affects Firefox < 124.0.1.
No detection rules found.
No public exploits indexed.
Bleepingcomputer
Hackers earn $1,078,750 for 28 zero-days at Pwn2Own Berlin
blogs_bleepingcomputer·2025-05-19
Hackers earn $1,078,750 for 28 zero-days at Pwn2Own Berlin
## Hackers earn $1,078,750 for 28 zero-days at Pwn2Own Berlin
## Sergiu Gatlan
The Pwn2Own Berlin 2025 hacking competition has concluded, with security researchers earning $1,078,750 after exploiting 29 zero-day vulnerabilities and encountering some bug collisions.
Throughout the contest, they targeted enterprise technologies in the AI, web browser, virtualization, local privilege escalation, servers, enterprise applications, cloud-native/container, and automotive categories.
According to Pwn2Own's rules , all targeted devices had all security updates installed and ran the latest operating system versions.
While Tesla also provided two 2025 Tesla Model Y and 2024 Tesla Model 3 bench-top units, security researchers who joined the contest haven't registered any attempts in this category
Bleepingcomputer
Mozilla fixes Firefox zero-day actively exploited in attacks
blogs_bleepingcomputer·2024-10-09·CVSS 9.8
CVE-2024-9680 [CRITICAL] Mozilla fixes Firefox zero-day actively exploited in attacks
## Mozilla fixes Firefox zero-day actively exploited in attacks
## Bill Toulas
Mozilla has issued an emergency security update for the Firefox browser to address a critical use-after-free vulnerability that is currently exploited in attacks.
The vulnerability, tracked as CVE-2024-9680, and discovered by ESET researcher Damien Schaeffer, is a use-after-free in Animation timelines.
This type of flaw occurs when memory that has been freed is still used by the program, allowing malicious actors to add their own malicious data to the memory region to perform code execution.
Animation timelines, part of Firefox's Web Animations API, are a mechanism that controls and synchronizes animations on web pages.
"An attacker was able to achieve code execution in the content process by exploiting a
Checkpoint
25th March – Threat Intelligence Report
blogs_checkpoint·2024-03-25
CVE-2024-29943 25th March – Threat Intelligence Report
Latest Publications
CPR Podcast Channel
AI Research
Web 3.0 Security
Intelligence Reports
ThreatCloud AI
Threat Intelligence & Research
Zero Day Protection
Sandblast File Analysis
About Us
SUBSCRIBE
2026
2025
2024
2023
2022
2021
2020
2019
2018
2017
2016
## 25th March – Threat Intelligence Report
For the latest discoveries in cyber research for the week of 25th March, please download our Threat_Intelligence Bulletin .
TOP ATTACKS AND BREACHES
Japanese tech company Fujitsu discovered malware on its work computers, risking exposure of customer data. The company, a leading IT firm, detected unauthorized access that potentially allowed personal and customer information to be illicitly extracted. Immediate actions included isolating affected computers and enhancing mon
Bleepingcomputer
Mozilla fixes two Firefox zero-day bugs exploited at Pwn2Own
blogs_bleepingcomputer·2024-03-22·CVSS 9.8
CVE-2024-29943 [CRITICAL] Mozilla fixes two Firefox zero-day bugs exploited at Pwn2Own
## Mozilla fixes two Firefox zero-day bugs exploited at Pwn2Own
## Sergiu Gatlan
Mozilla has released security updates to fix two zero-day vulnerabilities in the Firefox web browser exploited during the Pwn2Own Vancouver 2024 hacking competition.
Manfred Paul ( @_manfp ) earned a $100,000 award and 10 Master of Pwn points after exploiting an out-of-bounds (OOB) write flaw ( CVE-2024-29943 ) to gain remote code execution and escaping Mozilla Firefox's sandbox using an exposed dangerous function weakness ( CVE-2024-29944 ).
Mozilla says the first vulnerability can let attackers access a JavaScript object out-of-bounds by exploiting range-based bounds check elimination on vulnerable systems.
"An attacker was able to perform an out-of-bounds read or write on a JavaScript object by fooling
http://www.openwall.com/lists/oss-security/2024/03/23/1https://bugzilla.mozilla.org/show_bug.cgi?id=1886849https://www.mozilla.org/security/advisories/mfsa2024-15/http://www.openwall.com/lists/oss-security/2024/03/23/1https://bugzilla.mozilla.org/show_bug.cgi?id=1886849https://www.mozilla.org/security/advisories/mfsa2024-15/
2024-03-22
Published