Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
9.8
CVE-2024-29943: An attacker was able to perform an out-of-bounds read or write on a JavaScript object by fooling range-based bounds check elimination. This vulnerability affects Firefox < 124.0.1.
CVE-2024-29943 · published 2 years ago
Summary
An attacker was able to perform an out-of-bounds read or write on a JavaScript object by fooling range-based bounds check elimination. This vulnerability affects Firefox < 124.0.1.
What to do
- Update mozilla firefox to version 124.0.1 or later.
Affected software
| Vendor | Product | Affected versions |
|---|---|---|
| mozilla | firefox |
< 124.0.1 cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:* |
Original advisory text
An attacker was able to perform an out-of-bounds read or write on a JavaScript object by fooling range-based bounds check elimination. This vulnerability affects Firefox < 124.0.1.
An attacker was able to perform an out-of-bounds read or write on a JavaScript object by fooling range-based bounds check elimination. This vulnerability affects Firefox < 124.0.1.
References
- http://www.openwall.com/lists/oss-security/2024/03/23/1 Mailing List Third Party Advisory
- https://bugzilla.mozilla.org/show_bug.cgi?id=1886849 Issue Tracking
- https://www.mozilla.org/security/advisories/mfsa2024-15/ Vendor Advisory
Internet-facing
3 days
Internal
60 days
- Not known to be exploited
- Can be exploited automatically
- Gives an attacker full control
Type
CWE-125Out-of-bounds Read
CWE-787Out-of-bounds Write
Timeline
Published22 Mar 2024
Updated30 Sep 2026
First seen29 Sep 2026
Sources
CVE-2024-29943 · NVD
Track software like this
Free during beta