Skip to content
OpenAdvisories
Critical · 9.8 CVE-2024-7530 EUVD-2024-48437GHSA-4xc3-7r7g-7vx3

Incorrect garbage collection interaction could have led to a use-after-free. This vulnerability affects Firefox < 129.

Published Aug 6, 2024 · Updated Aug 8, 2024 · Assigned by mozilla

Vendor: Mozilla Product: Firefox Package: firefox Package: firefox Package: mozjs102 Package: mozjs115 Package: mozjs38 Package: mozjs52 Package: mozjs68 Package: mozjs78 Package: mozjs91 Category: Browsers Ecosystem: Ubuntu Ecosystem: Wolfi

Description

Incorrect garbage collection interaction could have led to a use-after-free. This vulnerability affects Firefox < 129.

Affected products

VendorProductAffectedFixed
Mozilla Firefox unspecified – < 129 129

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Ubuntu

Security tracker ↗
ReleasePackageFixed inAdvisory
Ubuntu 24.04 LTS mozjs102 +1 No fix yet —
Ubuntu 22.04 LTS mozjs78 +2 No fix yet —
Ubuntu 20.04 LTS firefox 129.0.1+build1-0ubuntu0.20.04.1 USN-6966-1
Ubuntu 20.04 LTS mozjs52 +1 No fix yet —
Ubuntu 18.04 LTS mozjs38 +1 No fix yet —

openSUSE

Security tracker ↗
ReleasePackageFixed inAdvisory
openSUSE Tumbleweed MozillaFirefox 129.0-1.1 openSUSE-SU-2024:14260-1
openSUSE Tumbleweed firefox-esr 153.0-1.1 openSUSE-SU-2026:11373-1

Wolfi

ReleasePackageFixed inAdvisory
Wolfi rolling firefox 129.0.2-r0 —

Advisories 5

References