CVE-2024-3855

Public on 2024-04-16

Modified on 2024-04-18

Description

In certain cases the JIT incorrectly optimized MSubstr operations, which led to out-of-bounds reads. This vulnerability affects Firefox < 125.

Severity

Important

See what this means

CVSS v3 Base Score

8.1

See breakdown

Affected Packages

Platform	Package	Release Date	Advisory	Status
Amazon Linux 2 - Firefox Extra	firefox			Not Affected

	Score Type	Score	Vector
Amazon Linux	CVSSv3	8.1	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H