Skip to content
8.8 High

CVE-2024-9400 A potential memory corruption vulnerability could be triggered if an attacker had the ability to trigger an OOM at a…

Description

A potential memory corruption vulnerability could be triggered if an attacker had the ability to trigger an OOM at a specific moment during JIT compilation. This vulnerability affects Firefox < 131, Firefox ESR < 128.3, Thunderbird < 128.3, and Thunderbird < 131.

Affected products and versions

Product Affected versions Fixed in
Firefox 131 earliest → < 131 131
Firefox ESR 128.3 earliest → < 128.3 128.3
Thunderbird 131 earliest → < 131 131
firefox_esr 128.3 earliest → < 128.3 128.3

References

Timeline

  1. Published
  2. Last modified
The 2221 CVEs of Firefox →
Track this CVE