CVE-2024-0741
Mozilla: Out of bounds write in ANGLE
Severity Score
Exploit Likelihood
Affected Versions
Public Exploits
1Exploited in Wild
-Decision
Descriptions
An out of bounds write in ANGLE could have allowed an attacker to corrupt memory leading to a potentially exploitable crash. This vulnerability affects Firefox < 122, Firefox ESR < 115.7, and Thunderbird < 115.7.
Una escritura fuera de los límites en ANGLE podría haber permitido que un atacante corrompiera la memoria y provocara un bloqueo potencialmente explotable. Esta vulnerabilidad afecta a Firefox < 122, Firefox ESR < 115.7 y Thunderbird < 115.7.
The Mozilla Foundation Security Advisory describes this flaw as: An out of bounds write in ANGLE could have allowed an attacker to corrupt memory leading to a potentially exploitable crash.
Multiple security issues were discovered in Firefox. If a user were tricked into opening a specially crafted website, an attacker could potentially exploit these to cause a denial of service, obtain sensitive information across domains, or execute arbitrary code. Cornel Ionce discovered that Firefox did not properly manage memory when opening the print preview dialog. An attacker could potentially exploit this issue to cause a denial of service.
CVSS Scores
SSVC
- Decision:-
Timeline
- 2024-01-19 CVE Reserved
- 2024-01-23 CVE Published
- 2024-08-12 First Exploit
- 2025-02-13 CVE Updated
- 2025-03-30 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
CWE
- CWE-787: Out-of-bounds Write
CAPEC
References (8)
| URL | Tag | Source |
|---|---|---|
| https://lists.debian.org/debian-lts-announce/2024/01/msg00015.html | Mailing List |
|
| https://lists.debian.org/debian-lts-announce/2024/01/msg00022.html | Mailing List |
|
| URL | Date | SRC |
|---|---|---|
| https://github.com/HyHy100/Firefox-ANGLE-CVE-2024-0741 | 2024-08-12 |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| https://www.mozilla.org/security/advisories/mfsa2024-01 | 2024-02-02 | |
| https://www.mozilla.org/security/advisories/mfsa2024-02 | 2024-02-02 | |
| https://www.mozilla.org/security/advisories/mfsa2024-04 | 2024-02-02 | |
| https://access.redhat.com/security/cve/CVE-2024-0741 | 2024-01-30 | |
| https://bugzilla.redhat.com/show_bug.cgi?id=2259926 | 2024-01-30 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Mozilla Search vendor "Mozilla" | Firefox Search vendor "Mozilla" for product "Firefox" | < 122.0 Search vendor "Mozilla" for product "Firefox" and version " < 122.0" | - |
Affected
| ||||||
| Mozilla Search vendor "Mozilla" | Firefox Esr Search vendor "Mozilla" for product "Firefox Esr" | < 115.7 Search vendor "Mozilla" for product "Firefox Esr" and version " < 115.7" | - |
Affected
| ||||||
| Mozilla Search vendor "Mozilla" | Thunderbird Search vendor "Mozilla" for product "Thunderbird" | < 115.7 Search vendor "Mozilla" for product "Thunderbird" and version " < 115.7" | - |
Affected
| ||||||
| Debian Search vendor "Debian" | Debian Linux Search vendor "Debian" for product "Debian Linux" | 10.0 Search vendor "Debian" for product "Debian Linux" and version "10.0" | - |
Affected
| ||||||