CVE-2024-11691

Summary

Certain WebGL operations on Apple silicon M series devices could have lead to an out-of-bounds write and memory corruption due to a flaw in Apple's GPU driver.
This bug only affected the application on Apple M series hardware. Other platforms were unaffected. This vulnerability affects Firefox < 133, Firefox ESR < 128.5, Firefox ESR < 115.18, Thunderbird < 133, Thunderbird < 128.5, and Thunderbird < 115.18.

Affected Software

VendorProductVersion RangeStatus
MozillaFirefoxunspecified < 133affected
MozillaFirefox ESRunspecified < 128.5affected
MozillaFirefox ESRunspecified < 115.18affected
MozillaThunderbirdunspecified < 133affected
MozillaThunderbirdunspecified < 128.5affected
MozillaThunderbirdunspecified < 115.18affected

Weaknesses

  • Out-of-bounds write in Apple GPU drivers via WebGL

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: total

References