CVE-2024-0741
MEDIUM 6.5EPSS 2.2%
An out of bounds write in ANGLE could have allowed an attacker to corrupt memory leading to a potentially exploitable crash. This vulnerability affects Firefox < 122, Firefox ESR < 115.7, and Thunderbird < 115.7.
- Affected
- Mozilla · Firefox · Firefox ESR · Thunderbird
- CVSS v3.1 NVD
- 6.5 MEDIUM
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - EPSS
- 2.15% chance of exploitation in the next 30 days, 82nd percentile
- Published
- 2024-01-23
- Updated
- 2025-05-30
Proof-of-concept exploits (1)
- HyHy100/Firefox-ANGLE-CVE-2024-07411★ · 2024-08-12
Security advisories
- https://www.mozilla.org/security/advisories/mfsa2024-01
- https://www.mozilla.org/security/advisories/mfsa2024-02
- https://www.mozilla.org/security/advisories/mfsa2024-04
- https://lists.debian.org/debian-lts-announce/2024/01/msg00015.html
- https://lists.debian.org/debian-lts-announce/2024/01/msg00022.html
- https://bugzilla.mozilla.org/show_bug.cgi?id=1864587