CVE-2024-10467

HIGH

Mozilla Firefox < 128.4.0 - Out-of-Bounds Write

Title source: rule
STIX 2.1

Description

Memory safety bugs present in Firefox 131, Firefox ESR 128.3, and Thunderbird 128.3. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 132, Firefox ESR < 128.4, Thunderbird < 128.4, and Thunderbird < 132.

References (7)

Core 7

Scores

CVSS v3 8.8
EPSS 0.0053
EPSS Percentile 67.4%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable yes
Technical Impact total

Details

CWE
CWE-125 CWE-120 CWE-787
Status published
Products (3)
mozilla/firefox < 128.4.0
mozilla/firefox < 132.0
mozilla/thunderbird < 128.4.0
Published Oct 29, 2024
Tracked Since Feb 18, 2026