Vulnerability CVE-2024-3862: Information

Description

The MarkStack assignment operator, part of the JavaScript engine, could access uninitialized memory if it were used in a self-assignment. This vulnerability affects Firefox < 125.

URL: https://nvd.nist.gov/vuln/detail/CVE-2024-3862
Published: April 16, 2024
Modified: April 17, 2024

Fixed packages

Package name
Branch
Fixed in version
Version from repository
Errata ID
Task #
State
firefoxsisyphus125.0.1-alt1125.0.3-alt1ALT-PU-2024-6765-2345346Fixed
firefoxsisyphus_loongarch64125.0.1-alt1.0.port125.0.3-alt1.0.portALT-PU-2024-7109-1-Fixed

References to Advisories, Solutions, and Tools

Hyperlink
Resource
https://bugzilla.mozilla.org/show_bug.cgi?id=1884457
    https://www.mozilla.org/security/advisories/mfsa2024-18/
      VKontakte|Telegram|YouTube|Forum|GitHub|Bugzilla
      Version: v24.5.0
      Back to top