CVE-2024-9396

Summary

It is currently unknown if this issue is exploitable but a condition may arise where the structured clone of certain objects could lead to memory corruption. This vulnerability affects Firefox < 131, Firefox ESR < 128.3, Thunderbird < 128.3, and Thunderbird < 131.

Affected Software

VendorProductVersion RangeStatus
MozillaFirefoxunspecified < 131affected
MozillaFirefox ESRunspecified < 128.3affected
MozillaThunderbirdunspecified < 128.3affected
MozillaThunderbirdunspecified < 131affected

Weaknesses

  • Potential memory corruption may occur when cloning certain objects

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: total

References