8.1
High
CVE-2024-5688 If a garbage collection was triggered at the right time, a use-after-free could have occurred during object transplant
Description
If a garbage collection was triggered at the right time, a use-after-free could have occurred during object transplant. This vulnerability affects Firefox < 127, Firefox ESR < 115.12, and Thunderbird < 115.12.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Firefox 127 | earliest → < 127 | 127 |
| Firefox ESR 115.12 | earliest → < 115.12 | 115.12 |
| Thunderbird 115.12 | earliest → < 115.12 | 115.12 |
| firefox_esr 115.12 | earliest → < 115.12 | 115.12 |
References
- bugzilla.mozilla.org bugzilla.mozilla.org
- lists.debian.org lists.debian.org
- lists.debian.org lists.debian.org
- www.mozilla.org www.mozilla.org
- www.mozilla.org www.mozilla.org
- www.mozilla.org www.mozilla.org
Timeline
- Published
- Last modified