CVE-2024-8387

Published

Last updated

NVD

https://nvd.nist.gov/vuln/detail/CVE-2024-8387

CGA ID

CGA-2fjh-3wrg-94h9

Severity

9.8

Critical

CVSS V3

Description

Memory safety bugs present in Firefox 129, Firefox ESR 128.1, and Thunderbird 128.1. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 130, Firefox ESR < 128.2, and Thunderbird < 128.2.

References

https://images.chainguard.dev/security/CGA-2fjh-3wrg-94h9
https://github.com/advisories/GHSA-m294-4vh4-9qwg
https://www.mozilla.org/security/advisories/mfsa2024-39/
https://www.mozilla.org/security/advisories/mfsa2024-40/
https://www.mozilla.org/security/advisories/mfsa2024-43/
https://bugzilla.mozilla.org/buglist.cgi?bug_id=1857607%2C1911858%2C1914009
https://security-tracker.debian.org/tracker/CVE-2024-8387

Affected packages

Advisories are based on vulnerability information provided by Grype from Anchore. Learn how Chainguard creates security advisories.

CVE-2024-8387

Severity

Description

References

Affected packages

Product

Why Chainguard

Customers

Company

Resources