CVE-2024-6615

Name

CVE-2024-6615

Description

Memory safety bugs present in Firefox 127 and Thunderbird 127. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 128 and Thunderbird < 128.

NVD Severity

unknown

Other trackers

CVE, NVD, CERT, CVE Details, CIRCL, Arch Linux, Debian, Red Hat, Ubuntu, Gentoo, SUSE (Bugzilla), SUSE (CVE), Mageia

Mailing lists

oss-security, full-disclosure, bugtraq

Exploits

Exploit DB, Metasploit

Forges

GitHub (code, issues), Aports (code, issues)

Type	URI
	https://bugzilla.mozilla.org/buglist.cgi?bug_id=1892875%2C1894428%2C1898364
	https://www.mozilla.org/security/advisories/mfsa2024-29/
	https://www.mozilla.org/security/advisories/mfsa2024-32/

CPE URI	Source package	Min version	Max version
	firefox	>= unspecified	< 128
	thunderbird	>= unspecified	< 128

References

Match rules

Vulnerable and fixed packages