RHSA-2024:7622

Memory safety bugs present in Firefox 130, Firefox ESR 128.2, and Thunderbird 128.2.

Memory safety bugs present in Firefox 130, Firefox ESR 115.15, Firefox ESR 128.2, and Thunderbird 128.2.

A compromised content process could have allowed for the arbitrary loading of cross-origin pages.

A potential memory corruption vulnerability could be triggered if an attacker had the ability to trigger an OOM at a specific moment during JIT compilation.

It is currently unknown if this issue is exploitable but a condition may arise where the structured clone of certain objects could lead to memory corruption.

A website configured to initiate a specially crafted WebTransport session could crash the Firefox process leading to a denial of service condition.

An attacker could, via a specially crafted multipart response, execute arbitrary JavaScript under the `resource://pdf.js` origin.

An attacker could write data to the user's clipboard, bypassing the user prompt, during a certain sequence of navigational events.

Memory safety bugs present in Firefox 130.

An attacker could, via a specially crafted multipart response, execute arbitrary JavaScript under the `resource://devtools` origin.

By checking the result of calls to `window.open` with specifically set protocol handlers, an attacker could determine if the application which implements that protocol handler is installed.

A missing delay in directory upload UI could have made it possible for an attacker to trick a user into granting permission via clickjacking.