PT-2024-7619 · Mozilla+4 · Firefox+4

Lukas Bernhard · Published 2024-06-11 · Updated 2025-03-21 · CVE-2024-5694

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 127

Description The issue is related to a use-after-free in the JavaScript engine, allowing an attacker to read memory in the JavaScript string section of the heap. This could enable a remote attacker to access confidential data.

Recommendations For versions prior to 127, update to version 127 or later to resolve the issue.

Exploit

Fix

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

ALT-PU-2024-13895

ALT-PU-2024-13898

ALT-PU-2024-15839

ALT-PU-2024-15840

BDU:2024-09025

CVE-2024-5694

OESA-2025-1322

OESA-2025-1323

OPENSUSE-SU-2024:14044-1

OPENSUSE-SU-2024:14572-1

USN-6862-1

Affected Products

Alt Linux

Astra Linux

Firefox

Linuxmint

Ubuntu

References · 1942

• 🔥 https://github.com/mistymntncop/CVE-2023-4863 · Exploit
• 🔥 https://github.com/LOURC0D3/CVE-2024-4367-PoC · Exploit
• 🔥 https://github.com/bjrjk/CVE-2024-29943 · Exploit
• 🔥 https://github.com/s4vvysec/CVE-2024-4367-POC · Exploit
• 🔥 https://github.com/LiveOverflow/webp-CVE-2023-4863 · Exploit
• 🔥 https://github.com/wrv/cve-2023-5217-poc · Exploit
• 🔥 https://github.com/UT-Security/cve-2023-5217-poc · Exploit
• 🔥 https://github.com/spaceraccoon/detect-cve-2024-4367 · Exploit
• 🔥 https://github.com/Zombie-Kaiser/cve-2024-4367-PoC-fixed · Exploit
• 🔥 https://github.com/tdonaworth/Firefox-CVE-2024-9680 · Exploit
• 🔥 https://github.com/bbaranoff/CVE-2023-4863 · Exploit
• https://ubuntu.com/security/CVE-2024-5700 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-5701 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-5694 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2023-6209 · Security Note