CVE-2024-7521

Summary

Incomplete WebAssembly exception handing could have led to a use-after-free. This vulnerability affects Firefox < 129, Firefox ESR < 115.14, Firefox ESR < 128.1, Thunderbird < 128.1, and Thunderbird < 115.14.

Affected Software

VendorProductVersion RangeStatus
MozillaFirefoxunspecified < 129affected
MozillaFirefox ESRunspecified < 115.14affected
MozillaFirefox ESRunspecified < 128.1affected
MozillaThunderbirdunspecified < 128.1affected
MozillaThunderbirdunspecified < 115.14affected

Weaknesses

  • Incomplete WebAssembly exception handing

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: yes
    • Technical Impact: total

References