CVE-2024-4765

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 126 Firefox for Android versions prior to 126

Description The issue arises from the use of an insecure MD5 hash to store web application manifests, allowing for a hash collision that could overwrite another application's manifest. This could be exploited to run arbitrary code in another application's context.

Recommendations For Firefox versions prior to 126, update to version 126 or later to resolve the issue. For Firefox for Android versions prior to 126, update to version 126 or later to resolve the issue.