Record status Published
Identifier year (not publication year) 2024
Source publication Sep 3, 2024
Source updated Nov 4, 2025
Imported by cveboard Oct 24, 2026
CNA source text (English) The JavaScript garbage collector could mis-color cross-compartment objects if OOM conditions were detected at the right point between two passes. This could have led to memory corruption. This vulnerability affects Firefox < 130, Firefox ESR < 128.2, Firefox ESR < 115.15, Thunderbird < 128.2, and Thunderbird < 115.15.
Scoped product and version facts Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
Firefox
Vendor Mozilla
Product Firefox
Platforms Unknown
Default status Unknown
Firefox · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status) unspecified affectedcustom 130 Unavailable None listed
Firefox ESR
Vendor Mozilla
Product Firefox ESR
Platforms Unknown
Default status Unknown
Firefox ESR · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status) unspecified affectedcustom 128.2 Unavailable None listed
Firefox ESR
Vendor Mozilla
Product Firefox ESR
Platforms Unknown
Default status Unknown
Firefox ESR · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status) unspecified affectedcustom 115.15 Unavailable None listed
Thunderbird
Vendor Mozilla
Product Thunderbird
Platforms Unknown
Default status Unknown
Thunderbird · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status) unspecified affectedcustom 128.2 Unavailable None listed
Thunderbird
Vendor Mozilla
Product Thunderbird
Platforms Unknown
Default status Unknown
Thunderbird · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status) unspecified affectedcustom 115.15 Unavailable None listed