CVE-2024-8389

Name

CVE-2024-8389

Description

Memory safety bugs present in Firefox 129. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 130.

NVD Severity

high

Other trackers

CVE, NVD, CERT, CVE Details, CIRCL, Arch Linux, Debian, Red Hat, Ubuntu, Gentoo, SUSE (Bugzilla), SUSE (CVE), Mageia

Mailing lists

oss-security, full-disclosure, bugtraq

Exploits

Exploit DB, Metasploit

Forges

GitHub (code, issues), Aports (code, issues)

Type	URI
	https://bugzilla.mozilla.org/buglist.cgi?bug_id=1907230%2C1909367
	https://www.mozilla.org/security/advisories/mfsa2024-39/

CPE URI	Source package	Min version	Max version
	firefox	>= unspecified	< 130
`cpe:2.3:a:mozilla:firefox::::::::`	firefox	>= 0	< 130

References

Match rules

Vulnerable and fixed packages