CVE-2024-5695 — Out-of-bounds Write in Mozilla Firefox

Vendor	Product	Version range	Fixed in
debian	firefox	< firefox 127.0-1 (sid)	firefox 127.0-1 (sid)
mozilla	firefox	< 127.0	127.0
mozilla	firefox	—	—
mozilla	firefox	>= 0 < 127.0.2+build1-0ubuntu0.20.04.1	127.0.2+build1-0ubuntu0.20.04.1
mozilla	firefox	>= unspecified < 127	127

Ubuntu

Firefox vulnerabilities

vendor_ubuntu·2024-07-03·CVSS 8.1

CVE-2024-5693 [HIGH] Firefox vulnerabilities Title: Firefox vulnerabilities Summary: Several security issues were fixed in Firefox. Multiple security issues were discovered in Firefox. If a user were tricked into opening a specially crafted website, an attacker could potentially exploit these to cause a denial of service, obtain sensitive information across domains, or execute arbitrary code. (CVE-2024-5689, CVE-2024-5690, CVE-2024-5691, CVE-2024-5693, CVE-2024-5697, CVE-2024-5698, CVE-2024-5699, CVE-2024-5700, CVE-2024-5701) Lukas Bernhard discovered that Firefox did not properly manage memory during garbage collection. An attacker could potentially exploit this issue to cause a denial of service, or execute arbitrary code. (CVE-2024-5688) Lukas Bernhard discovered that Firefox did not properly manage memory in the JavaScript en

Debian

CVE-2024-5695: firefox - If an out-of-memory condition occurs at a specific point using allocations in th...

vendor_debian·2024·CVSS 9.8

CVE-2024-5695 [CRITICAL] CVE-2024-5695: firefox - If an out-of-memory condition occurs at a specific point using allocations in th... If an out-of-memory condition occurs at a specific point using allocations in the probabilistic heap checker, an assertion could have been triggered, and in rarer situations, memory corruption could have occurred. This vulnerability affects Firefox < 127. Scope: local sid: resolved (fixed in 127.0-1)

Mozilla

Mozilla Foundation Security Advisory 2024-25: CVE-2024-5695

vendor_mozilla·CVSS 9.8

CVE-2024-5695 [CRITICAL] Mozilla Foundation Security Advisory 2024-25: CVE-2024-5695 Mozilla Foundation Security Advisory 2024-25 CVE: CVE-2024-5695 Product: Firefox Impact: high Fixed in: Firefox 127

OSV

firefox vulnerabilities

osv·2024-07-03·CVSS 8.1

CVE-2024-5689 [HIGH] firefox vulnerabilities firefox vulnerabilities Multiple security issues were discovered in Firefox. If a user were tricked into opening a specially crafted website, an attacker could potentially exploit these to cause a denial of service, obtain sensitive information across domains, or execute arbitrary code. (CVE-2024-5689, CVE-2024-5690, CVE-2024-5691, CVE-2024-5693, CVE-2024-5697, CVE-2024-5698, CVE-2024-5699, CVE-2024-5700, CVE-2024-5701) Lukas Bernhard discovered that Firefox did not properly manage memory during garbage collection. An attacker could potentially exploit this issue to cause a denial of service, or execute arbitrary code. (CVE-2024-5688) Lukas Bernhard discovered that Firefox did not properly manage memory in the JavaScript engine. An attacker could potentially exploit this issue to obtain

OSV

CVE-2024-5695: If an out-of-memory condition occurs at a specific point using allocations in the probabilistic heap checker, an assertion could have been triggered,

osv·2024-06-11·CVSS 9.8

CVE-2024-5695 [CRITICAL] CVE-2024-5695: If an out-of-memory condition occurs at a specific point using allocations in the probabilistic heap checker, an assertion could have been triggered, If an out-of-memory condition occurs at a specific point using allocations in the probabilistic heap checker, an assertion could have been triggered, and in rarer situations, memory corruption could have occurred. This vulnerability affects Firefox < 127.

GHSA

GHSA-gfgx-4754-9hhp: If an out-of-memory condition occurs at a specific point using allocations in the probabilistic heap checker, an assertion could have been triggered,

ghsa_unreviewed·2024-06-11

CVE-2024-5695 [CRITICAL] CWE-787 GHSA-gfgx-4754-9hhp: If an out-of-memory condition occurs at a specific point using allocations in the probabilistic heap checker, an assertion could have been triggered, If an out-of-memory condition occurs at a specific point using allocations in the probabilistic heap checker, an assertion could have been triggered, and in rarer situations, memory corruption could have occurred. This vulnerability affects Firefox < 127.

CVE-2024-5695: If an out-of-memory condition occurs at a specific point using allocations in the probabilistic heap checker, an assertion could have been triggered, and in…

Affected

CVSS provenance