TI-2024-03604 CVE-2024-3864 · GHSA-w74w-xq97-pg62
Memory corruption in Mozilla Firefox
Priority LOW 39
Memory safety bug present in Firefox 124, Firefox ESR 115.9, and Thunderbird 115.9.
RHSA-2024:1905
firefox security update
Released 2024-04-18 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream EUS (v.9.2) firefox-115.10.0-1.el9_2, firefox-x11-115.10.0-1.el9_2
Fixes 8 records
TI-2024-03594 CVE-2024-3854 · GHSA-xc66-q4x2-cwqx
Out-of-bounds read in Mozilla Firefox
Priority LOW 39
In some code patterns the JIT incorrectly optimized switch statements and generated code with out-of-bounds-reads.
TI-2024-03597 CVE-2024-3857 · GHSA-8564-m639-jh8r
Use after free in Mozilla Firefox
Priority LOW 36
The JIT created incorrect code for arguments in certain cases.
TI-2024-03592 CVE-2024-3852 · GHSA-pc7c-2483-8558
GetBoundName could return the wrong version of an object when JIT optimizations were…
Priority LOW 36
GetBoundName could return the wrong version of an object when JIT optimizations were applied.
TI-2024-03599 CVE-2024-3859 · GHSA-6f82-r7wj-8fxf
Out-of-bounds read in Mozilla Firefox
Priority LOW 30
On 32-bit versions there were integer-overflows that led to an out-of-bounds-read that potentially could be triggered by a malformed OpenType font.
TI-2024-02426 CVE-2024-2609 · GHSA-xr62-xhf5-qw2c
The permission prompt input delay could expire while the window is not in focus.
Priority LOW 30
The permission prompt input delay could expire while the window is not in focus.
TI-2024-03096 CVE-2024-3302 · GHSA-p6gp-c388-p4cr
Resource allocation without limits in Mozilla Firefox
Priority LOW 19
There was no limit to the number of HTTP/2 CONTINUATION frames that would be processed.
TI-2024-03601 CVE-2024-3861 · GHSA-mvc5-vcrh-v937
Use after free in Mozilla Firefox
Priority LOW 18
If an AlignedBuffer were assigned to itself, the subsequent self-move could result in an incorrect reference count and later use-after-free.