PT-2024-4659

CVE-2024-5702

·

Published

2024-06-11

·

Updated

2026-07-22

Description by

CVSS 3.1
10
Critical
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions: Firefox versions prior to 125 Firefox ESR versions prior to 115.12 Thunderbird versions prior to 115.12
Description: The issue is related to memory corruption in the networking stack, potentially leading to a crash. It is also described as a use-after-free vulnerability, which could allow a remote attacker to cause a denial of service.
Recommendations: For Firefox versions prior to 125, update to version 125 or later. For Firefox ESR versions prior to 115.12, update to version 115.12 or later. For Thunderbird versions prior to 115.12, update to version 115.12 or later.
Exploitability
Exploit
Fix
Impacts
Researchers
Vendors
Affected products
Weakness enumeration
Related identifiers
ALSA-2024:3954
ALSA-2024:3955
ALSA-2024:4002
ALSA-2024:4036
ALT-PU-2024-10126
ALT-PU-2024-10593
ALT-PU-2024-13897
ALT-PU-2024-13898
ALT-PU-2024-14780
ALT-PU-2024-14892
ALT-PU-2024-15087
ALT-PU-2024-15175
ALT-PU-2024-15840
ALT-PU-2024-15841
CESA-2024_3954
CESA-2024_4036
CLSA-2026-1784712935
DLA-3825-1
DLA-3836-1
DSA-5709-1
DSA-5711-1
INFSA-2024_3954
INFSA-2024_3955
INFSA-2024_4002
INFSA-2024_4036
MGASA-2024-0222
MGASA-2024-0231
OESA-2024-1976
OESA-2025-1322
OESA-2025-1323
OPENSUSE-SU-2024:14049-1
OPENSUSE-SU-2024_2061-1
RHSA-2024:3949
RHSA-2024:3950
RHSA-2024:3951
RHSA-2024_3951
RHSA-2024:3952
RHSA-2024:3953
RHSA-2024:3954
RHSA-2024_3954
RHSA-2024:3955
RHSA-2024_3955
RHSA-2024:3958
RHSA-2024:3972
RHSA-2024:4001
RHSA-2024:4002
RHSA-2024_4002
RHSA-2024:4003
RHSA-2024:4004
RHSA-2024:4015
RHSA-2024:4016
RHSA-2024_4016
RHSA-2024:4018
RHSA-2024:4036
RHSA-2024_4036
RHSA-2024:4063
RLSA-2024:3954
RLSA-2024:3955
RLSA-2024:4002
RLSA-2024:4036
SUSE-SU-2024:2012-1
SUSE-SU-2024:2061-1
SUSE-SU-2024:2073-1
SUSE-SU-2024:2371-1
SUSE-SU-2024:2399-1
USN-6840-1
Found an issue in the description? Have something to add? Feel free to write us 👾