PT-2024-3492

CVE-2024-3860

·

Published

2024-04-16

·

Updated

2025-03-14

Description by

CVSS 3.1
6.2
Medium
MetricsAV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions Firefox versions prior to 125
Description The issue is related to an out-of-memory condition during object initialization, which could result in an empty shape list. If the Just-In-Time (JIT) compiler subsequently traced the object, it would crash. This could potentially allow a remote attacker to cause a denial of service.
Recommendations For versions prior to 125, update to a version that contains a fix for this issue to prevent potential crashes due to the out-of-memory condition during object initialization.
Exploitability
Exploit
Fix
Impacts
Researchers
Vendors
Affected products
Related identifiers
ALT-PU-2024-15839
ALT-PU-2024-6765
OESA-2025-1265
OESA-2025-1268
OPENSUSE-SU-2024:13907-1
OPENSUSE-SU-2024:14572-1
USN-6747-1
USN-6747-2
Found an issue in the description? Have something to add? Feel free to write us 👾