Skip to content
OpenAdvisories
Medium · 4.3 CVE-2024-10941 EUVD-2024-33358GHSA-8w77-hpx9-8fm3

A malicious website could have included an iframe with an malformed URI resulting in a non-exploitable browser crash. This vulnerability af…

Published Nov 6, 2024 · Updated Feb 10, 2025 · Assigned by mozilla

Description

A malicious website could have included an iframe with an malformed URI resulting in a non-exploitable browser crash. This vulnerability affects Firefox < 126.

Affected products

VendorProductAffectedFixed
Mozilla Firefox unspecified – < 126 126

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

ReleasePackageFixed inAdvisory
Ubuntu 20.04 LTS firefox 126.0+build2-0ubuntu0.20.04.1 —

References