CVE-2024-8385

CRÍTICO 9.8CVE-2024-8385 · Published 03/09/2024 · updated 17/06/2026

En resumen

CVE-2024-8385 es una vulnerabilidad CRÍTICO (CVSS 9.8) que afecta a firefox (mozilla), firefox esr (mozilla).
Probabilidad de explotación en los próximos 30 días (EPSS): 0.57%, mayor que el 47.5% de las vulnerabilidades.
Solución: actualizar a 130.0, 128.2 o posterior.

Package	Affected versions	Patched versions
firefox mozilla	`< 130.0`	`130.0`
firefox esr mozilla	`< 128.2`	`128.2`

Description

A difference in the handling of StructFields and ArrayTypes in WASM could be used to trigger an exploitable type confusion vulnerability. This vulnerability affects Firefox < 130, Firefox ESR < 128.2, and Thunderbird < 128.2.

References

bugzilla.mozilla.org/show_bug.cgi · Issue Tracking
mozilla.org/security/advisories/mfsa2024-39 · Vendor Advisory
mozilla.org/security/advisories/mfsa2024-40 · Vendor Advisory
mozilla.org/security/advisories/mfsa2024-43

Más vulnerabilidades de firefox

Ver todo →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

firefox

mozilla

< 130.0

130.0

firefox esr

mozilla

< 128.2

128.2

Más vulnerabilidades de firefox

Ver todo →