CVE-2024-42329CWE-476CWE-690

JS - Crash on unexpected HTTP server response

Low · published November 27, 2024

CVSS v3.1
3.3
EPSS
0%
Percentile
15.2
In the wild
Unconfirmed
What it is

The webdriver for the Browser object expects an error object to be initialized when the webdriver_session_query function fails. But this function can fail for various reasons without an error description and then the wd->error will be NULL and trying to read from it will result in a crash.

The record
Technical detail
CVSS v3.1
3.3 · LOW
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
CVSS v4.0
Not supplied
EPSS
0.00248 · 15.2th percentile
Weaknesses
CWE-476 · NULL Pointer Dereference; CWE-690 · Unchecked Return Value to NULL Pointer Dereference
Published
2024-11-27T12:05Z
EPSS history
Timeline
  • 27 NOV 12:05Z
    JS - Crash on unexpected HTTP server response
    cvelistv5