CVE-2024-2613

Data was not properly sanitized when decoding a QUIC ACK frame; this could have led to unrestricted memory consumption and a crash

High · published March 19, 2024

CVSS v3.1
7.5
EPSS
1%
Percentile
42.0
In the wild
Unconfirmed
What it is

Data was not properly sanitized when decoding a QUIC ACK frame; this could have led to unrestricted memory consumption and a crash. This vulnerability affects Firefox < 124.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00501 · 42.0th percentile
Published
2024-03-19T12:02Z
EPSS history
Timeline
  • 19 MAR 12:02Z
    Data was not properly sanitized when decoding a QUIC ACK frame; this could have led to unrestricted memory consumption and a crash
    cvelistv5