CVE-2024-8384

Summary

The JavaScript garbage collector could mis-color cross-compartment objects if OOM conditions were detected at the right point between two passes. This could have led to memory corruption. This vulnerability affects Firefox < 130, Firefox ESR < 128.2, Firefox ESR < 115.15, Thunderbird < 128.2, and Thunderbird < 115.15.

Affected Software

VendorProductVersion RangeStatus
MozillaFirefoxunspecified < 130affected
MozillaFirefox ESRunspecified < 128.2affected
MozillaFirefox ESRunspecified < 115.15affected
MozillaThunderbirdunspecified < 128.2affected
MozillaThunderbirdunspecified < 115.15affected

Weaknesses

  • Garbage collection could mis-color cross-compartment objects in OOM conditions

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: yes
    • Technical Impact: total

CVE Program Container

Additional References

References