CVE-2024-6602 | THREATINT

Assigner	mozilla
Reserved	2024-07-09
Published	2024-07-09
Updated	2024-09-12

Description

A mismatch between allocator and deallocator could have lead to memory corruption. This vulnerability affects Firefox < 128, Firefox ESR < 115.13, Thunderbird < 115.13, and Thunderbird < 128.

Problem types

Memory corruption in NSS

Product status

Any version before 128

affected

Any version before 115.13

affected

Any version before 115.13

affected

Any version before 128

affected

Credits

Ronald Crane

References

https://bugzilla.mozilla.org/show_bug.cgi?id=1895032

https://www.mozilla.org/security/advisories/mfsa2024-29/

https://www.mozilla.org/security/advisories/mfsa2024-30/

https://www.mozilla.org/security/advisories/mfsa2024-31/

https://www.mozilla.org/security/advisories/mfsa2024-32/

cve.org CVE-2024-6602

nvd.nist.gov CVE-2024-6602

Download JSON