CVE-2024-8385

Summary

A difference in the handling of StructFields and ArrayTypes in WASM could be used to trigger an exploitable type confusion vulnerability. This vulnerability affects Firefox < 130, Firefox ESR < 128.2, and Thunderbird < 128.2.

Affected Software

Weaknesses

• WASM type confusion involving ArrayTypes

ADP Enrichment

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: yes
  • Technical Impact: total

References

• https://bugzilla.mozilla.org/show_bug.cgi?id=1911909
• https://www.mozilla.org/security/advisories/mfsa2024-39/
• https://www.mozilla.org/security/advisories/mfsa2024-40/
• https://www.mozilla.org/security/advisories/mfsa2024-43/

• ←Previous
• Next→