CVE-2024-8387

CRITICAL

Firefox < 130, Firefox ESR < 128.2, and Thunderbird < 128.2 - Memory Corruption

Title source: llm
STIX 2.1

Description

Memory safety bugs present in Firefox 129, Firefox ESR 128.1, and Thunderbird 128.1. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 130, Firefox ESR < 128.2, and Thunderbird < 128.2.

References (4)

Core 4

Scores

CVSS v3 9.8
EPSS 0.0080
EPSS Percentile 74.2%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable yes
Technical Impact total

Details

CWE
CWE-119 CWE-787
Status published
Products (3)
mozilla/firefox 129.0
mozilla/firefox_esr 128.1
mozilla/thunderbird 128.1
Published Sep 03, 2024
Tracked Since Feb 18, 2026