Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2024-3864

Memory safety bug present in Firefox 124, Firefox ESR 115.9, and Thunderbird 115.9. This bug showed evidence of memory corruption and we presume that with enough effort this could have been exploited to run arbitrary code. This vulnerability affects Firefox < 125, Firefox ESR < 115.10, and Thunderbird < 115.10.

Published

2024-04-16T16:15:08.913

Last Modified

2025-04-01T17:39:30.730

Status

Analyzed

Source

[email protected]

Severity

CVSSv3.1: 8.1 (HIGH)

Weaknesses

Type: Secondary
CWE-119

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Application	mozilla	firefox	< 115.10.0	Yes
Application	mozilla	firefox	< 125.0	Yes
Application	mozilla	thunderbird	< 115.10.0	Yes
Operating System	debian	debian_linux	10.0	Yes

References

https://bugzilla.mozilla.org/show_bug.cgi?id=1888333 Issue Tracking, Exploit, Vendor Advisory ([email protected])
https://lists.debian.org/debian-lts-announce/2024/04/msg00012.html Mailing List ([email protected])
https://lists.debian.org/debian-lts-announce/2024/04/msg00013.html Mailing List ([email protected])
https://www.mozilla.org/security/advisories/mfsa2024-18/ Vendor Advisory ([email protected])
https://www.mozilla.org/security/advisories/mfsa2024-19/ Vendor Advisory ([email protected])
https://www.mozilla.org/security/advisories/mfsa2024-20/ Vendor Advisory ([email protected])
https://bugzilla.mozilla.org/show_bug.cgi?id=1888333 Issue Tracking, Exploit, Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://lists.debian.org/debian-lts-announce/2024/04/msg00012.html Mailing List (af854a3a-2127-422b-91ae-364da2661108)
https://lists.debian.org/debian-lts-announce/2024/04/msg00013.html Mailing List (af854a3a-2127-422b-91ae-364da2661108)
https://www.mozilla.org/security/advisories/mfsa2024-18/ Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://www.mozilla.org/security/advisories/mfsa2024-19/ Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://www.mozilla.org/security/advisories/mfsa2024-20/ Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)