CVE-2024-3860: Medium severity firefox vulnerability
An out-of-memory condition during object initialization could result in an empty shape list. If the JIT subsequently traced the object it would crash.
Affected Software
Event History
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
What is the severity of CVE-2024-3860?
CVE-2024-3860 is classified as a high severity vulnerability due to the potential for crashes caused by an out-of-memory condition.
How do I fix CVE-2024-3860?
To mitigate CVE-2024-3860, update Mozilla Firefox to version 126 or later, or ensure that the Debian firefox package is updated to version 134.0.2-2 or higher.
What impact does CVE-2024-3860 have on affected systems?
CVE-2024-3860 can lead to application crashes when the JIT (Just-In-Time compiler) attempts to process objects with an empty shape list.
Which software versions are affected by CVE-2024-3860?
CVE-2024-3860 affects Mozilla Firefox versions up to 125 and the Debian firefox package versions earlier than 134.0.2-2.
Is user data at risk with CVE-2024-3860?
While CVE-2024-3860 primarily causes crashes, it does not indicate direct risk to user data but could lead to instability in the application.