Skip to content
CVE PROGRAM SOURCE RECORD8.8 High

CVE-2024-6609

Memory corruption in NSS

Description

When almost out-of-memory an elliptic curve key which was never allocated could have been freed again. This vulnerability affects Firefox < 128 and Thunderbird < 128.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Mozilla Firefox

  • unspecified to < 128affected

Mozilla Thunderbird

  • unspecified to < 128affected

References