CVE-2024-1556

EPSS 0.22%
Published 20.02.2024 14:15:09
Last modified 27.03.2025 14:40:12
Source security@mozilla.org
Teams watchlist Login
Open Login

The incorrect object was checked for NULL in the built-in profiler, potentially leading to invalid memory access and undefined behavior. *Note:* This issue only affects the application when the profiler is running. This vulnerability affects Firefox < 123.

Affected products Warnungen 0 Metrics 2 CWE 1 References 5

Verknüpft mit AI von unstrukturierten Daten zu bestehenden CPE der NVD

This information is available to logged-in users.

Data is provided by the National Vulnerability Database (NVD)

Mozilla ≫ Firefox Version < 123.0

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	0.22%	0.447

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
134c704f-9b21-4f2e-91b3-4a467353bcc0	6.5	2.8	3.6	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

CWE-754 Improper Check for Unusual or Exceptional Conditions

The product does not check or incorrectly checks for unusual or exceptional conditions that are not expected to occur frequently during day to day operation of the product.

https://www.mozilla.org/security/advisories/mfsa2024-05/

Vendor Advisory

https://bugzilla.mozilla.org/show_bug.cgi?id=1870414

Issue Tracking

https://nvd.nist.gov/vuln/detail/CVE-2024-1556

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2024-1556

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2024-1556

EUVD