CVE-2024-29943

An attacker was able to perform an out-of-bounds read or write on a JavaScript object by fooling range-based bounds check elimination. This vulnerability affects Firefox < 124.0.1.

Affected products

Alt Linux, Astra Linux, Firefox, Linuxmint, Ubuntu

Mozilla Firefox

< 124.0.1

Fix

Available

CVSS 3.1

9.8 CRITICAL

EPSS

22.9% (98th percentile)

Weakness

CWE-787, CWE-125

NVD status

Analyzed

Published

2024-03-22