CVE-2024-2613

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

Data was not properly sanitized when decoding a QUIC ACK frame; this could have led to unrestricted memory consumption and a crash. This vulnerability affects Firefox < 124.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-1021

Affected software

No affected versions have been published.

Timeline

Published: Mar 19, 2024
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2024

CVE-2024-261307.5cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. Starting in version 38.0.0 and prior CVE-2024-261317.8Element Android is an Android Matrix Client. Element Android version 1.4.3 through 1.6.10 is vulnerable to intent redirection, allowing a th CVE-2024-261323.3Element Android is an Android Matrix Client. A third-party malicious application installed on the same phone can force Element Android, vers CVE-2024-261334.9EventStoreDB (ESDB) is an operational database built to store events. A vulnerability has been identified in the projections subsystem in ve CVE-2024-261347.5cbor2 provides encoding and decoding for the Concise Binary Object Representation (CBOR) (RFC 8949) serialization format. Starting in versio CVE-2024-261358.8MeshCentral is a full computer management web site. Versions prior to 1.1.21 a cross-site websocket hijacking (CSWSH) vulnerability within t CVE-2024-261367.5kedi ElectronCord is a bot management tool for Discord. Commit aaaeaf4e6c99893827b2eea4dd02f755e1e24041 exposes an account access token in t CVE-2024-261385.3The XWiki licensor application, which manages and enforce application licenses for paid extensions, includes the document `Licenses.Code.Lic CVE-2024-261398.1OpenCTI is an open source platform allowing organizations to manage their cyber threat intelligence knowledge and observables. Due to lack o CVE-2024-26148.8Memory safety bugs present in Firefox 123, Firefox ESR 115.8, and Thunderbird 115.8. Some of these bugs showed evidence of memory corruption CVE-2024-261406.1com.yetanalytics/lrs is the Yet Analytics Core LRS Library. Prior to version 1.2.17 of the LRS library and version 0.7.5 of SQL LRS, a malic CVE-2024-261417.5Rack is a modular Ruby web server interface. Carefully crafted Range headers can cause a server to respond with an unexpectedly large respon