Skip to content
CVE PROGRAM SOURCE RECORD6.3 Medium

CVE-2024-6600

Memory corruption in WebGL API

Description

Due to large allocation checks in Angle for GLSL shaders being too lenient an out-of-bounds access could occur when allocating more than 8192 ints in private shader memory on macOS. This vulnerability affects Firefox < 128, Firefox ESR < 115.13, Thunderbird < 115.13, and Thunderbird < 128.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Mozilla Firefox

  • unspecified to < 128affected

Mozilla Firefox ESR

  • unspecified to < 115.13affected

Mozilla Thunderbird

  • unspecified to < 115.13affected

Mozilla Thunderbird

  • unspecified to < 128affected

References