CVE-2024-29943

Mozilla: Out-of-bounds access via Range Analysis bypass

Loading…

Severity

Critical

Red Hat Product Security

8.8

CVSS 3.1

Review impact separately from score.

Published · March 22, 2024

Updated · June 26, 2026

Description

A flaw was found in Mozilla. The Mozilla Foundation Security Advisory describes this flaw as follows: An attacker was able to perform an out-of-bounds read or write on a JavaScript object by fooling range-based bounds check elimination.

Statement

Red Hat Enterprise Linux ships Firefox Extended Support Release (ESR) and therefore it is not affected by this CVE.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CVSS 3.1 · 8.8
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE-787 · Out-of-bounds Write