CVE-2024-11706: Null Pointer Dereference
A null pointer dereference may have inadvertently occurred in pk12util, and specifically in the SECASN1DecodeItemUtil function, when handling malformed or improperly formatted input files. This vulnerability affects Firefox < 133 and Thunderbird < 133.
Other sources
A null pointer dereference may have inadvertently occurred in pk12util, and specifically in the SECASN1DecodeItemUtil function, when handling malformed or improperly formatted input files.
— Mozilla
Affected Software
Event History
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
What is the severity of CVE-2024-11706?
CVE-2024-11706 is classified as a moderate severity vulnerability due to the potential for denial of service through a null pointer dereference.
How do I fix CVE-2024-11706?
To fix CVE-2024-11706, update Firefox or Thunderbird to version 133 or later.
Which software versions are affected by CVE-2024-11706?
CVE-2024-11706 affects Firefox versions less than 133 and Thunderbird versions less than 133.
What kind of vulnerability is CVE-2024-11706?
CVE-2024-11706 is a null pointer dereference vulnerability that can occur when processing malformed or improperly formatted input files.
What can happen if I don't address CVE-2024-11706?
If CVE-2024-11706 is not addressed, it may result in application crashes or denial of service.