CVE-2024-6602

The Mozilla Foundation Security Advisory describes this flaw as:

A mismatch between allocator and deallocator could have lead to memory corruption.

Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.

Firefox and Thunderbird in Red Hat Enterprise Linux 8.8 and later are not affected by this vulnerability, as they use the system NSS library. Firefox and Thunderbird in earlier Red Hat Enterprise Linux 8 extended life streams were affected, and should be updated to fixed versions as they become available.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Currently, no mitigation is available for this vulnerability.