CVE-2024-3858

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 125

Description The issue is related to a buffer overflow in the js::CheckTracedThing() function of the Mozilla Firefox JIT compiler. This can be exploited by a remote attacker to cause a denial of service. The vulnerability is caused by the possibility of mutating a JavaScript object in such a way that it crashes the JIT while tracing it.

Recommendations For versions prior to 125, update to version 125 or later to resolve the issue. As a temporary workaround, consider restricting the use of JavaScript objects that could potentially cause the JIT to crash until a patch is available.