CVE-2024-3855

Name of the Vulnerable Software and Affected Versions: Firefox versions prior to 125

Description: The issue is related to the JIT component of the Mozilla Firefox browser, which incorrectly optimizes MSubstr operations, leading to out-of-bounds reads. This can allow a remote attacker to disclose protected information.

Recommendations: For versions prior to 125, update to version 125 or later to resolve the issue. As a temporary workaround, consider disabling the JIT compiler until a patch is available. Restrict access to sensitive information to minimize the risk of exploitation.