CVE-2024-5695 Memory corruption in Firefox
An out-of-memory condition in Firefox's heap checker can trigger assertions or memory corruption, potentially allowing code execution or crashes.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2024-5695?
CVE-2024-5695 is a critical memory corruption vulnerability in Mozilla Firefox, published on 11 Jun 2024. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
If an out-of-memory condition occurs at a specific point using allocations in the probabilistic heap checker, an assertion could have been triggered, and in rarer situations, memory corruption could have occurred. This vulnerability affects Firefox < 127.
Weakness: CWE-787
Which versions are affected by CVE-2024-5695?
It affects 1 product.
Products include Mozilla Firefox.
How do I fix CVE-2024-5695?
Upgrade to a fixed version.
Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.
Is CVE-2024-5695 being exploited?
There is no known exploitation of CVE-2024-5695 in the wild and no public exploit code.
Other vulnerabilities in Mozilla Firefox
Sources
Also known as GHSA-gfgx-4754-9hhp, UBUNTU-CVE-2024-5695.