CVE-2024-3853

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 125

Description A use-after-free issue could occur if a JavaScript realm was being initialized when a garbage collection started. This could potentially allow a remote attacker to execute arbitrary code. The vulnerability is related to the simultaneous loading of the global runtime environment and garbage collection.

Recommendations For versions prior to 125, update to a version that contains a fix for this issue to prevent potential exploitation. As a temporary workaround, consider restricting the use of JavaScript realms until a patch is available.