CVE-2024-1553

HIGH

Firefox < 123 and Firefox ESR < 115.8 - Memory Corruption

Title source: llm

Description

Memory safety bugs present in Firefox 122, Firefox ESR 115.7, and Thunderbird 115.7. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 123, Firefox ESR < 115.8, and Thunderbird < 115.8.

References (6)

Core 6

Core References

Issue Tracking

https://bugzilla.mozilla.org/buglist.cgi?bug_id=1855686%2C1867982%2C1871498%2C1872296%2C1873521%2C1873577%2C1873597%2C1873866%2C1874080%2C1874740%2C1875795%2C1875906%2C1876425%2C1878211%2C1878286

Mailing List

https://lists.debian.org/debian-lts-announce/2024/03/msg00000.html

Mailing List

https://lists.debian.org/debian-lts-announce/2024/03/msg00001.html

Vendor Advisory

https://www.mozilla.org/security/advisories/mfsa2024-05/

Vendor Advisory

https://www.mozilla.org/security/advisories/mfsa2024-06/

Vendor Advisory

https://www.mozilla.org/security/advisories/mfsa2024-07/

Scores

CVSS v3 8.1

EPSS 0.0051

EPSS Percentile 66.5%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact total

Details

CWE

CWE-119

Status published

Products (4)

debian/debian_linux 10.0

mozilla/firefox < 115.8.0

mozilla/firefox < 123.0

mozilla/thunderbird < 115.8.0

Published Feb 20, 2024

Tracked Since Feb 18, 2026