CVE-2024-1552

HIGH 7.5CVE-2024-1552 · Published 20/02/2024 · updated 17/06/2026

In short

CVE-2024-1552 is a HIGH (CVSS 7.5) vulnerability affecting firefox (mozilla), thunderbird (mozilla).
Chance of exploitation in the next 30 days (EPSS): 0.67%, higher than 52.2% of all vulnerabilities.
Fix: update to 115.8.0, 123.0 or later.

Package	Affected versions	Patched versions
firefox mozilla	`< 115.8.0< 123.0`	`115.8.0123.0`
thunderbird mozilla	`< 115.8.0`	`115.8.0`

Description

Incorrect code generation could have led to unexpected numeric conversions and potential undefined behavior.*Note:* This issue only affects 32-bit ARM devices. This vulnerability affects Firefox < 123, Firefox ESR < 115.8, and Thunderbird < 115.8.

References

bugzilla.mozilla.org/show_bug.cgi · Issue Tracking
lists.debian.org/debian-lts-announce/2024/03/msg00000.html · Mailing List
lists.debian.org/debian-lts-announce/2024/03/msg00001.html · Mailing List
mozilla.org/security/advisories/mfsa2024-05 · Vendor Advisory
mozilla.org/security/advisories/mfsa2024-06 · Vendor Advisory
mozilla.org/security/advisories/mfsa2024-07 · Vendor Advisory

More vulnerabilities in firefox

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

firefox

mozilla

< 115.8.0< 123.0

115.8.0123.0

thunderbird

mozilla

< 115.8.0

115.8.0

More vulnerabilities in firefox

See all →