CVE-2024-7521 - Use After Free

Q: What is the severity of CVE-2024-7521?

CVE-2024-7521 has been classified as a critical vulnerability due to its potential for exploitation leading to use-after-free conditions.

Q: How do I fix CVE-2024-7521?

To mitigate CVE-2024-7521, users should upgrade to Firefox version 129, Firefox ESR version 115.14, or Thunderbird version 128.1 or later.

Q: Which versions of Firefox are affected by CVE-2024-7521?

CVE-2024-7521 affects Firefox versions prior to 129 and Firefox ESR versions before 115.14.

Q: Are there any specific platforms impacted by CVE-2024-7521?

CVE-2024-7521 impacts users of Firefox, Firefox ESR, and Thunderbird on all platforms prior to the specified versions.

Q: What are the potential consequences of CVE-2024-7521?

The consequences of CVE-2024-7521 include potential arbitrary code execution and system compromise due to incomplete exception handling.

Affected Software

13 affected componentsFixes available

debian/firefox

131.0.2-2

debian/firefox-esr

115.14.0esr-1~deb11u1128.3.1esr-1~deb11u1115.14.0esr-1~deb12u1128.3.1esr-1~deb12u1128.3.0esr-2128.3.1esr-2

debian/thunderbird<=1:115.12.0-1~deb11u1, <=1:115.12.0-1~deb12u1

1:115.16.0esr-1~deb11u11:115.16.0esr-1~deb12u11:128.2.0esr-11:128.3.0esr-1

Mozilla Thunderbird<128.1

128.1

Mozilla Thunderbird<115.14

115.14

Mozilla Firefox<129.0

Mozilla Firefox ESR<115.14.0

Mozilla Firefox ESR=128.0

Mozilla Thunderbird<115.14.0

Mozilla Thunderbird=128.0.1

Mozilla Firefox<129

129

Mozilla Firefox ESR<128.1

128.1

Mozilla Firefox ESR<115.14

115.14

Event History

Aug 6, 2024

CVE Published

via Mozilla·12:00 AM

CVE Published

via MITRE·12:38 PM

Data Sourced

via MITRE·12:38 PM

DescriptionWeakness

Sep 16, 2024

Data Sourced

via Ubuntu·08:17 AM

RemedyDescriptionSeverityAffected Software

Parent advisories

This vulnerability appears in the following advisories.

Peer vulnerabilities

Found alongside the following vulnerabilities.

Frequently Asked Questions

1

What is the severity of CVE-2024-7521?

CVE-2024-7521 has been classified as a critical vulnerability due to its potential for exploitation leading to use-after-free conditions.

2

How do I fix CVE-2024-7521?

To mitigate CVE-2024-7521, users should upgrade to Firefox version 129, Firefox ESR version 115.14, or Thunderbird version 128.1 or later.

3

Which versions of Firefox are affected by CVE-2024-7521?

CVE-2024-7521 affects Firefox versions prior to 129 and Firefox ESR versions before 115.14.

4

Are there any specific platforms impacted by CVE-2024-7521?

CVE-2024-7521 impacts users of Firefox, Firefox ESR, and Thunderbird on all platforms prior to the specified versions.

5

What are the potential consequences of CVE-2024-7521?

The consequences of CVE-2024-7521 include potential arbitrary code execution and system compromise due to incomplete exception handling.

CVE-2024-7521: Use After Free