← Database

CVE-2024-8385

CRITICAL CVSS: 9.8 Published: 2024-09-03 Modified: 2026-06-17

Description

A difference in the handling of StructFields and ArrayTypes in WASM could be used to trigger an exploitable type confusion vulnerability. This vulnerability affects Firefox < 130, Firefox ESR < 128.2, and Thunderbird < 128.2.

Affected Platforms

Mozilla FirefoxMozilla Firefox Esr

Weakness Type

CWE-843, CWE-843

References