PT-2024-6058 · Mozilla+4 · Firefox+4

Published 2024-05-14 · Updated 2025-03-14 · CVE-2024-4778

Positive Technologies (AI Summary)

CVSS v2.0

10

Critical

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 126

Description The issue is related to memory safety bugs, including evidence of memory corruption, which could potentially be exploited to run arbitrary code. It affects the handling of overlaps between protected memory ranges, allowing a remote attacker to access confidential data, compromise its integrity, and cause a denial of service.

Recommendations For versions prior to 126, update to version 126 or later to resolve the issue.

Exploit

Fix

Buffer Overflow

Weakness Enumeration

CWE-1260

CWE-119

Related Identifiers

ALT-PU-2024-15839

ALT-PU-2024-7772

BDU:2024-06882

CVE-2024-4778

OESA-2025-1265

OESA-2025-1268

OPENSUSE-SU-2024:13980-1

OPENSUSE-SU-2024:14572-1

USN-6779-1

USN-6779-2

Affected Products

Alt Linux

Astra Linux

Firefox

Linuxmint

Ubuntu

References · 2095

• 🔥 https://github.com/LOURC0D3/CVE-2024-4367-PoC · Exploit
• 🔥 https://github.com/bjrjk/CVE-2024-29943 · Exploit
• 🔥 https://github.com/s4vvysec/CVE-2024-4367-POC · Exploit
• 🔥 https://github.com/spaceraccoon/detect-cve-2024-4367 · Exploit
• 🔥 https://github.com/Zombie-Kaiser/cve-2024-4367-PoC-fixed · Exploit
• 🔥 https://github.com/tdonaworth/Firefox-CVE-2024-9680 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2024-4367 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-9394 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-6613 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-10466 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2023-5725 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-9400 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2023-5172 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-3853 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-1548 · Security Note