PT-2024-7619

CVE-2024-5694

·

Published

2024-06-11

·

Updated

2025-03-21

Description by

CVSS 2.0
7.8
High
MetricsAV:N/AC:L/Au:N/C:C/I:N/A:N
Name of the Vulnerable Software and Affected Versions Firefox versions prior to 127
Description The issue is related to a use-after-free in the JavaScript engine, allowing an attacker to read memory in the JavaScript string section of the heap. This could enable a remote attacker to access confidential data.
Recommendations For versions prior to 127, update to version 127 or later to resolve the issue.
Exploitability
Exploit
Fix
Impacts
Researchers
Vendors
Affected products
Weakness enumeration
Related identifiers
ALT-PU-2024-13895
ALT-PU-2024-13898
ALT-PU-2024-15839
ALT-PU-2024-15840
OESA-2025-1322
OESA-2025-1323
OPENSUSE-SU-2024:14044-1
OPENSUSE-SU-2024:14572-1
USN-6862-1
Found an issue in the description? Have something to add? Feel free to write us 👾