Skip to content
OpenAdvisories
Critical · 9.8 CVE-2024-4778 EUVD-2024-44371GHSA-r6wj-xmgr-mg33

Memory safety bugs present in Firefox 125. Some of these bugs showed evidence of memory corruption and we presume that with enough effort s…

Published May 14, 2024 · Updated Aug 1, 2024 · Assigned by mozilla

Vendor: Mozilla Product: Firefox Package: firefox Package: mozjs102 Package: mozjs38 Package: mozjs52 Package: mozjs68 Package: mozjs78 Package: mozjs91 Category: Browsers Ecosystem: Ubuntu

Description

Memory safety bugs present in Firefox 125. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 126.

Affected products

VendorProductAffectedFixed
Mozilla Firefox unspecified – < 126 126

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Ubuntu

Security tracker ↗
ReleasePackageFixed inAdvisory
Ubuntu 24.04 LTS mozjs102 No fix yet —
Ubuntu 22.04 LTS mozjs78 +2 No fix yet —
Ubuntu 20.04 LTS firefox 126.0+build2-0ubuntu0.20.04.1 USN-6779-1
Ubuntu 20.04 LTS mozjs52 +1 No fix yet —
Ubuntu 18.04 LTS mozjs38 +1 No fix yet —

openSUSE

Security tracker ↗
ReleasePackageFixed inAdvisory
openSUSE Tumbleweed MozillaFirefox 126.0-1.1 openSUSE-SU-2024:13980-1
openSUSE Tumbleweed firefox-esr 128.5.1-1.1 openSUSE-SU-2024:14572-1

Advisories 5

References