CVE-2024-7652: Type Confusion in Async Generators in Javascript Engine
An error in the ECMA-262 specification relating to Async Generators could have resulted in a type confusion, potentially leading to memory corruption and an exploitable crash.
Affected Software
Event History
Parent advisories
This vulnerability appears in the following advisories.
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
What is the severity of CVE-2024-7652?
CVE-2024-7652 is classified as a high severity vulnerability due to its potential for memory corruption and exploitable crashes.
How do I fix CVE-2024-7652?
To fix CVE-2024-7652, update affected software such as Mozilla Firefox ESR to version 115.13 or later, or Mozilla Thunderbird to version 115.13 or later.
Which products are affected by CVE-2024-7652?
CVE-2024-7652 affects Mozilla Firefox versions up to 128, Mozilla Firefox ESR versions up to 115.13, and Thunderbird versions up to 128.
What types of vulnerabilities does CVE-2024-7652 relate to?
CVE-2024-7652 is related to a type confusion error in the ECMA-262 specification that impacts Async Generators.
Are there any known exploits for CVE-2024-7652?
As of now, there are no publicly known exploits specifically targeting CVE-2024-7652.