6.3

CVE-2024-6600

Memory corruption in WebGL API

Due to large allocation checks in Angle for GLSL shaders being too lenient an out-of-bounds access could occur when allocating more than 8192 ints in private shader memory on macOS. This vulnerability affects Firefox < 128, Firefox ESR < 115.13, Thunderbird < 115.13, and Thunderbird < 128.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Mozilla ≫ Firefox SwEditionesr Version < 115.13
Mozilla ≫ Firefox Version < 128.0
Mozilla ≫ Thunderbird Version < 115.13
Mozilla ≫ Thunderbird Version >= 116.0 < 128.0
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.4% 0.313
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
134c704f-9b21-4f2e-91b3-4a467353bcc0 6.3 2.8 3.4
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L
CWE-770 Allocation of Resources Without Limits or Throttling

The product allocates a reusable resource or group of resources on behalf of an actor without imposing any intended restrictions on the size or number of resources that can be allocated.

https://bugzilla.mozilla.org/show_bug.cgi?id=1888340
Issue Tracking
https://www.mozilla.org/security/advisories/mfsa2024-29/
Vendor Advisory
https://www.mozilla.org/security/advisories/mfsa2024-30/
Vendor Advisory
https://www.mozilla.org/security/advisories/mfsa2024-31/
Vendor Advisory
https://www.mozilla.org/security/advisories/mfsa2024-32/
Vendor Advisory