CVE-2024-9402

Name of the Vulnerable Software and Affected Versions Firefox versions 130 and earlier Firefox ESR versions 128.2 and earlier Thunderbird versions 128.2 and earlier

Description The issue is related to memory safety bugs that could potentially be exploited to run arbitrary code, with evidence of memory corruption found in some cases. This could allow a remote attacker to impact the confidentiality, integrity, and availability of protected information. The vulnerability is associated with a buffer overflow when cloning objects, which can be exploited by a remote attacker.

Recommendations For Firefox version 130 and earlier, update to version 131 or later. For Firefox ESR version 128.2 and earlier, update to version 128.3 or later. For Thunderbird version 128.2 and earlier, update to version 128.3 or later.