PT-2024-5770 · Mozilla+4 · Firefox+4

Christian Holler · Published 2024-08-06 · Updated 2025-11-19 · CVE-2024-7530

Positive Technologies (AI Summary)

CVSS v2.0

10

Critical

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 129

Description The issue is related to the Garbage Collector component of Mozilla Firefox, where there is a use-after-free error due to concurrent loading of the singleton global runtime and garbage collection. This could allow a remote attacker to execute arbitrary code.

Recommendations For versions prior to 129, update to version 129 or later to resolve the issue.

Fix

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

ALT-PU-2024-13895

ALT-PU-2024-15839

ALT-PU-2025-11100

ALT-PU-2025-14599

BDU:2024-06483

CVE-2024-7530

OPENSUSE-SU-2024:14260-1

USN-6966-1

USN-6966-2

Affected Products

Alt Linux

Astra Linux

Linuxmint

Firefox

Ubuntu

References · 53

• https://ubuntu.com/security/CVE-2024-7531 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-7530 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2024-7530 · Security Note
• https://ubuntu.com/security/CVE-2024-7519 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-7529 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-7518 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:14260-1 · Vendor Advisory
• https://osv.dev/vulnerability/USN-6966-1 · Vendor Advisory
• https://osv.dev/vulnerability/USN-6966-2 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-6966-1 · Vendor Advisory
• https://mozilla.org/en-US/security/advisories/mfsa2024-33 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se18-bulletin-2025-0114SE18MD · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-7527 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se17-bulletin-2024-1108SE17MD · Vendor Advisory
• https://ubuntu.com/security/notices/USN-6966-2 · Vendor Advisory