Vulnerability CVE-2024-4775: Information
Description
An iterator stop condition was missing when handling WASM code in the built-in profiler, potentially leading to invalid memory access and undefined behavior. *Note:* This issue only affects the application when the profiler is running. This vulnerability affects Firefox < 126.
Fixed packages
Package name | Branch | Fixed in version | Version from repository | Errata ID | Task # | State |
|---|---|---|---|---|---|---|
| firefox | sisyphus | 126.0-alt1 | 127.0-alt1 | ALT-PU-2024-7772-2 | 347340 | Fixed |
| firefox | sisyphus_riscv64 | 126.0-alt0.port | 126.0-alt0.port | ALT-PU-2024-8054-1 | - | Fixed |
| firefox | sisyphus_loongarch64 | 126.0-alt1.0.port | 126.0-alt1.0.port | ALT-PU-2024-7895-1 | - | Fixed |
| firefox | p11 | 126.0-alt1 | 126.0.1-alt1 | ALT-PU-2024-7772-2 | 347340 | Fixed |