CVE-2024-9396

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2024-9396
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-9396.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2024-9396
Downstream
CGA (4)
DEBIAN (1)
MGASA (1)
OESA (4)
openSUSE (4)
RHSA (16)
RLSA (2)
SUSE (5)
UBUNTU (1)
Related
ALSA (3)
CGA (1)
openSUSE (4)
SUSE (5)
Published
2024-10-01T16:15:10Z
Modified
2026-04-16T04:35:49Z
Severity
  • 8.8 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVSS Calculator
Summary
[none]
Details

It is currently unknown if this issue is exploitable but a condition may arise where the structured clone of certain objects could lead to memory corruption. This vulnerability affects Firefox < 131, Firefox ESR < 128.3, Thunderbird < 128.3, and Thunderbird < 131.

References

Affected packages

Git /

Affected ranges

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-9396.json"
unresolved_ranges 
[
    {
        "events":  [
            {
                "introduced":  "0"
            },
            {
                "fixed":  "128.3.0"
            }
        ]
    },
    {
        "events":  [
            {
                "introduced":  "0"
            },
            {
                "fixed":  "131.0"
            }
        ]
    },
    {
        "events":  [
            {
                "introduced":  "0"
            },
            {
                "fixed":  "128.3.0"
            }
        ]
    },
    {
        "events":  [
            {
                "introduced":  "129.0"
            },
            {
                "fixed":  "131.0"
            }
        ]
    }
]