CVE-2024-4774

Description

The `ShmemCharMapHashEntry()` code was susceptible to potentially undefined behavior by bypassing the move semantics for one of its data members. This vulnerability affects Firefox < 126.

Reserved 2024-05-10 | Published 2024-05-14 | Updated 2024-08-01 | Assigner mozilla

Problem types

Undefined behavior in ShmemCharMapHashEntry()

Product status

Any version before 126
affected

Credits

Ronald Crane

References

bugzilla.mozilla.org/show_bug.cgi?id=1886598

www.mozilla.org/security/advisories/mfsa2024-21/

cve.org (CVE-2024-4774)

nvd.nist.gov (CVE-2024-4774)

Download JSON