CVE-2024-5694 — Use After Free in Mozilla Firefox

CWE-416 — Use After Free9 documents8 sources
Severity
7.5HIGHNVD
OSV8.1
EPSS
0.7%
top 27.74%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Mozilla Firefox
Timeline
PublishedJun 11
Latest updateJul 3

Description

An attacker could have caused a use-after-free in the JavaScript engine to read memory in the JavaScript string section of the heap. This vulnerability affects Firefox < 127.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:NExploitability: 3.9 | Impact: 3.6

Affected Packages3 packages

▶CVEListV5mozilla/firefoxunspecified — 127
▶NVDmozilla/firefox< 127.0
▶Ubuntumozilla/firefox< 127.0.2+build1-0ubuntu0.20.04.1

🔴Vulnerability Details

4
OSV
firefox vulnerabilities↗2024-07-03
▶
CVEList
CVE-2024-5694: An attacker could have caused a use-after-free in the JavaScript engine to read memory in the JavaScript string section of the heap↗2024-06-11
▶
GHSA
GHSA-j6vm-3wj6-fwrh: An attacker could have caused a use-after-free in the JavaScript engine to read memory in the JavaScript string section of the heap↗2024-06-11
▶
OSV
CVE-2024-5694: An attacker could have caused a use-after-free in the JavaScript engine to read memory in the JavaScript string section of the heap↗2024-06-11
▶

📋Vendor Advisories

4
Ubuntu
Firefox vulnerabilities↗2024-07-03
▶
Microsoft
An attacker could have caused a use-after-free in the JavaScript engine to read memory in the JavaScript string section of the heap. This vulnerability affects Firefox < 127.↗2024-06-11
▶
Debian
CVE-2024-5694: firefox - An attacker could have caused a use-after-free in the JavaScript engine to read ...↗2024
▶
Mozilla
Mozilla Foundation Security Advisory 2024-25: CVE-2024-5694↗
▶
CVE-2024-5694 — Use After Free in Mozilla Firefox | cvebase