CVE-2024-9680/9.8: Firefox.
Tomek CEDRO <[email protected]> Thu, 10 Oct 2024 17:54:13 +0200
| Newsgroups | gmane.os.freebsd.devel.gecko,gmane.os.freebsd.security.general,gmane.os.freebsd.devel.ports |
|---|---|
| Message-ID | <CAFYkXj=OqDuB482PCqK47uwpiXhNefbx1ZbL76z2dQ=L0w4hdA@mail.gmail.com> |
An attacker was able to achieve code execution in the content process by exploiting a use-after-free in Animation timelines. We have had reports of this vulnerability being exploited in the wild. This vulnerability affects Firefox < 131.0.2, Firefox ESR < 128.3.1, and Firefox ESR < 115.16.1. https://www.mozilla.org/en-US/security/advisories/mfsa2024-51/ https://nvd.nist.gov/vuln/detail/CVE-2024-9680 -- CeDeROM, SQ7MHZ, http://www.tomek.cedro.info