Vulnerability CVE-2024-3855: Information

Description

In certain cases the JIT incorrectly optimized MSubstr operations, which led to out-of-bounds reads. This vulnerability affects Firefox < 125.

URL: https://nvd.nist.gov/vuln/detail/CVE-2024-3855
Published: April 16, 2024
Modified: April 17, 2024

Fixed packages

Package name
Branch
Fixed in version
Version from repository
Errata ID
Task #
State
firefoxsisyphus125.0.1-alt1125.0.3-alt1ALT-PU-2024-6765-2345346Fixed
firefoxsisyphus_loongarch64125.0.1-alt1.0.port125.0.3-alt1.0.portALT-PU-2024-7109-1-Fixed

References to Advisories, Solutions, and Tools

Hyperlink
Resource
https://bugzilla.mozilla.org/show_bug.cgi?id=1885828
    https://www.mozilla.org/security/advisories/mfsa2024-18/
      VKontakte|Telegram|YouTube|Forum|GitHub|Bugzilla
      Version: v24.5.0
      Back to top