CVE-2024-7522

Summary

Editor code failed to check an attribute value. This could have led to an out-of-bounds read. This vulnerability affects Firefox < 129, Firefox ESR < 115.14, Firefox ESR < 128.1, Thunderbird < 128.1, and Thunderbird < 115.14.

Affected Software

VendorProductVersion RangeStatus
MozillaFirefoxunspecified < 129affected
MozillaFirefox ESRunspecified < 115.14affected
MozillaFirefox ESRunspecified < 128.1affected
MozillaThunderbirdunspecified < 128.1affected
MozillaThunderbirdunspecified < 115.14affected

Weaknesses

  • Out of bounds read in editor component

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: yes
    • Technical Impact: partial

References