Vulnerability CVE-2024-7530: Information

Description

Incorrect garbage collection interaction could have led to a use-after-free. This vulnerability affects Firefox < 129.

Severity: HIGH (8.8) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

URL: https://nvd.nist.gov/vuln/detail/CVE-2024-7530

Published: Aug. 6, 2024

Modified: Aug. 12, 2024

Error type identifier: CWE-416

Fixed packages

Package name	Branch	Fixed in version	Version from repository	Errata ID	Task #	State
firefox	sisyphus	129.0-alt1	130.0.1-alt1	ALT-PU-2024-10881-1	354552	Fixed
firefox	sisyphus_riscv64	129.0-alt0.port	129.0.2-alt0.port	ALT-PU-2024-11099-1	-	Fixed
firefox	sisyphus_loongarch64	129.0-alt0.port	130.0-alt0.port	ALT-PU-2024-11145-1	-	Fixed
firefox	p11	130.0-alt1	126.0.1-alt1	ALT-PU-2024-12492-4	357171	Testing

Hyperlink	Resource
https://bugzilla.mozilla.org/show_bug.cgi?id=1904011	Issue Tracking Permissions Required
https://www.mozilla.org/security/advisories/mfsa2024-33/	Vendor Advisory

Affected configurations:
1. Configuration 1
  cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*
  End excluding
  129.0

Version: v24.9.1