8.8

CVE-2024-6615

EPSS 0.59%
Veröffentlicht 09.07.2024 15:15:13
Zuletzt bearbeitet 04.04.2025 14:41:55
Quelle security@mozilla.org
CVE-Watchlists
Login
Unerledigt
Login

Memory safety bugs fixed in Firefox 128 and Thunderbird 128

Memory safety bugs present in Firefox 127 and Thunderbird 127. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 128 and Thunderbird < 128.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 6

NVD 2 VulnDex Vulnerability Enrichment 2

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Mozilla ≫ Firefox Version < 128.0

Mozilla ≫ Thunderbird Version < 128.0

VulnDex Vulnerability Enrichment

Diese Information steht angemeldeten Benutzern zur Verfügung.

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.59%	0.683

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
134c704f-9b21-4f2e-91b3-4a467353bcc0	8.8	2.8	5.9	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE-787 Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.

https://www.mozilla.org/security/advisories/mfsa2024-29/

Vendor Advisory

https://www.mozilla.org/security/advisories/mfsa2024-32/

Vendor Advisory

https://bugzilla.mozilla.org/buglist.cgi?bug_id=1892875%2C1894428%2C1898364

Issue Tracking

https://nvd.nist.gov/vuln/detail/CVE-2024-6615

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2024-6615

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2024-6615

EUVD