CVE-2024-9396

HIGH

Firefox < 131 and ESR < 128.3 - Memory Corruption via Structured Clone

Title source: llm
STIX 2.1

Description

It is currently unknown if this issue is exploitable but a condition may arise where the structured clone of certain objects could lead to memory corruption. This vulnerability affects Firefox < 131, Firefox ESR < 128.3, Thunderbird < 128.3, and Thunderbird < 131.

References (5)

Core 5

Scores

CVSS v3 8.8
EPSS 0.0018
EPSS Percentile 39.1%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact total

Details

CWE
CWE-119
Status published
Products (3)
mozilla/firefox < 128.3.0
mozilla/firefox < 131.0
mozilla/thunderbird < 128.3.0
Published Oct 01, 2024
Tracked Since Feb 18, 2026