CVE-2024-9680

Published Oct 9, 2024

Last updated 3 months ago

Overview

AI description

Automated description summarized from trusted sources.

CVE-2024-9680 is a use-after-free vulnerability found within the Animation timelines component of Mozilla Firefox and Thunderbird. This flaw allows an attacker to achieve code execution in the content process by exploiting memory that has been freed but is still referenced. Reports indicate that this vulnerability has been actively exploited in the wild. Affected versions include Firefox before 131.0.2, Firefox ESR before 115.16.1 and 128.3.1, and Thunderbird before 131.0.1, 128.3.1, and 115.16.0. Mozilla has released updates to address this issue.

Description: An attacker was able to achieve code execution in the content process by exploiting a use-after-free in Animation timelines. We have had reports of this vulnerability being exploited in the wild. This vulnerability affects Firefox < 131.0.2, Firefox ESR < 128.3.1, Firefox ESR < 115.16.1, Thunderbird < 131.0.1, Thunderbird < 128.3.1, and Thunderbird < 115.16.0.
Source: security@mozilla.org
NVD status: Analyzed
Products: firefox, thunderbird, debian_linux

Risk scores

CVSS 3.1

Type: Primary
Base score: 9.8
Impact score: 5.9
Exploitability score: 3.9
Vector string: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Severity: CRITICAL

Known exploits

Data from CISA

Vulnerability name: Mozilla Firefox Use-After-Free Vulnerability
Exploit added on: Oct 15, 2024
Exploit action due: Nov 5, 2024
Required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Weaknesses

nvd@nist.gov: CWE-416
134c704f-9b21-4f2e-91b3-4a467353bcc0: CWE-416

Hype score: Not currently trending

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:mozilla:firefox:*:*:*:*:esr:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "45244B45-832B-4C4A-8004-8D13C331E52B",
            "versionEndExcluding": "115.16.1"
          },
          {
            "criteria": "cpe:2.3:a:mozilla:firefox:*:*:*:*:-:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "07E39FE8-1685-46D2-9E3E-2613F3852132",
            "versionEndExcluding": "131.0.2"
          },
          {
            "criteria": "cpe:2.3:a:mozilla:firefox:*:*:*:*:esr:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "C4AEB9BD-EB47-4F96-BC72-949023ACE8ED",
            "versionEndExcluding": "128.3.1",
            "versionStartIncluding": "128.1.0"
          },
          {
            "criteria": "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "DB9A49A0-8233-46B2-894A-FAD4DC6ED563",
            "versionEndExcluding": "115.16.0"
          },
          {
            "criteria": "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "F48D7DE7-477D-4026-B6BD-BFE2BC5382F3",
            "versionEndExcluding": "128.3.1",
            "versionStartIncluding": "128.0.1"
          },
          {
            "criteria": "cpe:2.3:a:mozilla:thunderbird:131.0:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "FD5E6249-26BF-4E13-87D8-B15EF63A859F"
          }
        ],
        "operator": "OR"
      }
    ]
  },
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "FA6FEEC2-9F11-4643-8827-749718254FED"
          }
        ],
        "operator": "OR"
      }
    ]
  }
]

References

Sources include official advisories and independent security research.