CVE-2024-9400

Summary

A potential memory corruption vulnerability could be triggered if an attacker had the ability to trigger an OOM at a specific moment during JIT compilation. This vulnerability affects Firefox < 131, Firefox ESR < 128.3, Thunderbird < 128.3, and Thunderbird < 131.

Affected Software

VendorProductVersion RangeStatus
MozillaFirefoxunspecified < 131affected
MozillaFirefox ESRunspecified < 128.3affected
MozillaThunderbirdunspecified < 128.3affected
MozillaThunderbirdunspecified < 131affected

Weaknesses

  • Potential memory corruption during JIT compilation

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: total

References