NetSight
critical9.8

CVE-2024-8385

A difference in the handling of StructFields and ArrayTypes in WASM could be used to trigger an exploitable type confusion vulnerability.

Impact

A difference in the handling of StructFields and ArrayTypes in WASM could be used to trigger an exploitable type confusion vulnerability. This vulnerability affects Firefox < 130, Firefox ESR < 128.2, and Thunderbird < 128.2.

Affected products

VendorProductAffected versions
MozillaFirefox
before 130.0
MozillaFirefox Esr
before 128.2

Weakness classification

References