PT-2024-7152 · Mozilla+4 · Firefox+4

Atte Kettunen · Published 2024-10-14 · Updated 2025-11-19 · CVE-2024-9936

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 131.0.3

Description The issue is related to the manipulation of the selection node cache, which may cause unexpected behavior and potentially lead to an exploitable crash. This could allow a remote attacker to cause a denial of service. The vulnerability is associated with incorrect clearance or release of resources in the Selection Node Cache component of Mozilla Firefox.

Recommendations For versions prior to 131.0.3, upgrade Firefox to version 131.0.3 or later to resolve the issue. As a temporary workaround, consider restricting access to potentially malicious websites to minimize the risk of exploitation.

Fix

Improper Resource Release

Race Condition

Weakness Enumeration

CWE-404

CWE-362

Related Identifiers

ALT-PU-2024-15089

ALT-PU-2024-15839

ALT-PU-2025-11100

ALT-PU-2025-14599

BDU:2024-08484

CVE-2024-9936

OPENSUSE-SU-2024:14415-1

USN-7078-1

Affected Products

Alt Linux

Astra Linux

Firefox

Linuxmint

Ubuntu

References · 32

• https://bdu.fstec.ru/vul/2024-08484 · Security Note
• https://osv.dev/vulnerability/CVE-2024-9936 · Vendor Advisory
• https://mozilla.org/security/advisories/mfsa2024-53 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-7078-1 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2024-9936 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-9936 · Security Note
• https://mozilla.org/en-US/security/advisories/mfsa2024-53 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se18-bulletin-2025-0114SE18MD · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-9936 · Security Note
• https://ubuntu.com/security/CVE-2024-9936 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2024-9936 · Security Note
• https://osv.dev/vulnerability/USN-7078-1 · Vendor Advisory
• https://mozilla.org/en-US/security/advisories/mfsa2024-53/#CVE-2024-9936 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se16-bulletin-20251225SE16 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se17-bulletin-2025-0319SE17 · Vendor Advisory