CVE-2024-7527

Severity CVSS v4.0:
Pending analysis
Type:
CWE-416 Use After Free
Publication date:
06/08/2024
Last modified:
18/03/2025

Description

Unexpected marking work at the start of sweeping could have led to a use-after-free. This vulnerability affects Firefox

Vulnerable products and versions

CPE From Up to
cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:* 129.0 (excluding)
cpe:2.3:a:mozilla:firefox_esr:*:*:*:*:*:*:*:* 115.14.0 (excluding)
cpe:2.3:a:mozilla:firefox_esr:128.0:*:*:*:*:*:*:*
cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:* 115.14.0 (excluding)
cpe:2.3:a:mozilla:thunderbird:128.0.1:*:*:*:*:*:*:*