Vulnerability CVE-2024-0754: Information

Description

Some WASM source files could have caused a crash when loaded in devtools. This vulnerability affects Firefox < 122.

Severity: MEDIUM (6.5) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

URL: https://nvd.nist.gov/vuln/detail/CVE-2024-0754

Published: Jan. 23, 2024

Modified: Jan. 30, 2024

Fixed packages

Package name	Branch	Fixed in version	Version from repository	Errata ID	Task #	State
firefox	sisyphus	122.0-alt1	126.0.1-alt1	ALT-PU-2024-1368-1	338897	Fixed
firefox	sisyphus_riscv64	122.0.1-alt0.port	126.0-alt0.port	ALT-PU-2024-2222-1	-	Fixed
firefox	sisyphus_loongarch64	123.0-alt1.0.port	126.0-alt1.0.port	ALT-PU-2024-3000-1	-	Fixed
firefox	p11	122.0-alt1	126.0.1-alt1	ALT-PU-2024-1368-1	338897	Fixed

Hyperlink	Resource
https://bugzilla.mozilla.org/show_bug.cgi?id=1871605	Issue Tracking Permissions Required
https://www.mozilla.org/security/advisories/mfsa2024-01/	Release Notes Vendor Advisory

Affected configurations:
1. Configuration 1
  cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*
  End excliding
  122.0

Version: v24.5.3