MFSA2024-63 Firefox: Security Vulnerabilities fixed in Firefox 133 (CVE-2024-11691)

MFSA2024-63 Firefox: Security Vulnerabilities fixed in Firefox 133 (CVE-2024-11691)

Severity

4

CVSS

(AV:L/AC:M/Au:N/C:P/I:P/A:P)

Published

11/26/2024

Created

11/28/2024

Added

11/27/2024

Modified

12/16/2024

Description

Certain WebGL operations on Apple silicon M series devices could have lead to an out-of-bounds write and memory corruption due to a flaw in Apple's GPU driver. *This bug only affected the application on Apple M series hardware. Other platforms were unaffected.* This vulnerability affects Firefox < 133, Firefox ESR < 128.5, Firefox ESR < 115.18, Thunderbird < 133, Thunderbird < 128.5, and Thunderbird < 115.18.

Solution(s)

• mozilla-firefox-upgrade-133_0

References

• https://attackerkb.com/topics/cve-2024-11691
• CVE - 2024-11691
• http://www.mozilla.org/security/announce/2024/mfsa2024-63.html