Mozilla Foundation Security Advisory 2024-51
Security Vulnerability fixed in Firefox 131.0.2, Firefox ESR 128.3.1, Firefox ESR 115.16.1
- Announced
- October 9, 2024
- Impact
- critical
- Products
- Firefox, Firefox ESR
- Fixed in
-
- Firefox 131.0.2
- Firefox ESR 115.16.1
- Firefox ESR 128.3.1
#CVE-2024-9680: Use-after-free in Animation timeline
- Reporter
- Damien Schaeffer from ESET
- Impact
- critical
Description
An attacker was able to achieve code execution in the content process by exploiting a use-after-free in Animation timelines. We have had reports of this vulnerability being exploited in the wild.