CVE-2024-10467

HIGH

Firefox < 132 and ESR < 128.4 - Memory Corruption via Out-of-bounds Read

Title source: llm
STIX 2.1

Description

Memory safety bugs present in Firefox 131, Firefox ESR 128.3, and Thunderbird 128.3. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 132, Firefox ESR < 128.4, Thunderbird < 128.4, and Thunderbird < 132.

References (7)

Core 7

Scores

CVSS v3 8.8
EPSS 0.0060
EPSS Percentile 44.2%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable yes
Technical Impact total

Details

CWE
CWE-120 CWE-125 CWE-787
Status published
Products (3)
mozilla/firefox < 128.4.0
mozilla/firefox < 132.0
mozilla/thunderbird < 128.4.0
Published Oct 29, 2024
Tracked Since Feb 18, 2026