CVE-2024-5695

If an out-of-memory condition occurs at a specific point using allocations in the probabilistic heap checker, an assertion could have been triggered, and in…

Critical · published June 11, 2024

CVSS v3.1
9.8
EPSS
1%
Percentile
46.8
In the wild
Unconfirmed
What it is

🔥 Danger ahead! Firefox versions below 127 could hit a memory wall, leading to potential corruption that’s more than just a hiccup! Think of it like a restaurant kitchen that suddenly runs out of critical ingredients mid-service — without the right checks in place, chaos can ensue, and the food (read: your data) could get spoiled before it ever hits the table! If exploited, this vulnerability could leave your browser in a precarious state, allowing attackers to corrupt memory, which could lead to crashes, data leaks, or worse. This is a critical issue that could compromise the integrity of your browsing experience and expose sensitive information. 🚨

Put simply

Think of it like a restaurant kitchen that suddenly runs out of critical ingredients mid-service — without the right checks in place, chaos can ensue, and the food (read: your data) could get spoiled before it ever hits the table! This vulnerability occurs during specific memory allocations when the probabilistic heap checker encounters an out-of-memory condition, potentially resulting in an assertion failure or memory corruption. This flaw affects Firefox versions below 127 and could be exploited if the right conditions are met.

What to do

If exploited, this vulnerability could leave your browser in a precarious state, allowing attackers to corrupt memory, which could lead to crashes, data leaks, or worse. This is a critical issue that could compromise the integrity of your browsing experience and expose sensitive information. 🚨 Update Firefox to version 127 or later immediately to patch this vulnerability. Regularly check for updates to ensure you’re protected from critical issues like this one. 🛡️ You’ve got this! Keep your browser updated and stay secure. 🦸‍♂️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00577 · 46.8th percentile
Published
2024-06-11T12:40Z
EPSS history
Timeline
  • 11 JUN 12:40Z
    If an out-of-memory condition occurs at a specific point using allocations in the probabilistic heap checker, an assertion could have been triggered, and in…
    cvelistv5