PT-2024-3569 · Mozilla+4 · Firefox+4
Lukas Bernhard
·
Published
2024-04-16
·
Updated
2025-03-14
·
CVE-2024-3858
CVSS v3.1
7.5
High
| Vector | AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Mozilla Firefox versions prior to 125
Description
The issue is related to a buffer overflow in the js::CheckTracedThing() function of the Mozilla Firefox JIT compiler. This can be exploited by a remote attacker to cause a denial of service. The vulnerability is caused by the possibility of mutating a JavaScript object in such a way that it crashes the JIT while tracing it.
Recommendations
For versions prior to 125, update to version 125 or later to resolve the issue.
As a temporary workaround, consider restricting the use of JavaScript objects that could potentially cause the JIT to crash until a patch is available.
Exploit
Fix
NULL Pointer Dereference
Buffer Overflow
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Alt Linux
Astra Linux
Linuxmint
Firefox
Ubuntu