Description
A mismatch between allocator and deallocator could have led to memory corruption. This vulnerability affects Firefox < 128, Firefox ESR < 115.13, Thunderbird < 115.13, and Thunderbird < 128.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Mozilla Firefox
unspecified to < 128affected
Mozilla Firefox ESR
unspecified to < 115.13affected
Mozilla Thunderbird
unspecified to < 115.13affected
Mozilla Thunderbird
unspecified to < 128affected
References
- https://bugzilla.mozilla.org/show_bug.cgi?id=1895032 ↗
- https://www.mozilla.org/security/advisories/mfsa2024-29/ ↗
- https://www.mozilla.org/security/advisories/mfsa2024-30/ ↗
- https://www.mozilla.org/security/advisories/mfsa2024-31/ ↗
- https://www.mozilla.org/security/advisories/mfsa2024-32/ ↗
- https://lists.debian.org/debian-lts-announce/2024/10/msg00028.html ↗