CVE-2024-0744

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

In some circumstances, JIT compiled code could have dereferenced a wild pointer value. This could have led to an exploitable crash. This vulnerability affects Firefox < 122.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-119

Affected software

No affected versions have been published.

Timeline

Published
Jan 23, 2024
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2024

CVE-2024-07458.8The WebAudio `OscillatorNode` object was susceptible to a stack buffer overflow. This could have led to a potentially exploitable crash. ThiCVE-2024-07466.5A Linux user opening the print preview dialog could have caused the browser to crash. This vulnerability affects Firefox < 122, Firefox ESR CVE-2024-07476.5When a parent page loaded a child in an iframe with `unsafe-inline`, the parent Content Security Policy could have overridden the child ContCVE-2024-07484.3A compromised content process could have updated the document URI. This could have allowed an attacker to set an arbitrary URI in the addresCVE-2024-07494.3A phishing site could have repurposed an `about:` dialog to show phishing content with an incorrect origin in the address bar. This vulnerabCVE-2024-07508.8A bug in popup notifications delay calculation could have made it possible for an attacker to trick a user into granting permissions. This vCVE-2024-07518.8A malicious devtools extension could have been used to escalate privileges. This vulnerability affects Firefox < 122, Firefox ESR < 115.7, aCVE-2024-07526.5A use-after-free crash could have occurred on macOS if a Firefox update were being applied on a very busy system. This could have resulted iCVE-2024-07536.5In specific HSTS configurations an attacker could have bypassed HSTS on a subdomain. This vulnerability affects Firefox < 122, Firefox ESR <CVE-2024-07546.5Some WASM source files could have caused a crash when loaded in devtools. This vulnerability affects Firefox < 122.CVE-2024-07558.8Memory safety bugs present in Firefox 121, Firefox ESR 115.6, and Thunderbird 115.6. Some of these bugs showed evidence of memory corruptionCVE-2024-07565.4The Insert or Embed Articulate Content into WordPress plugin through 4.3000000023 lacks validation of URLs when adding iframes, allowing att
CVE-2024-0744: High severity, CVSS 7.5 | Vulnix