Mozilla Product Security Update Advisory (CVE-2024-9680)

Overview

 

An update has been released to address vulnerabilities in Mozilla Products. Users of the affected versions are advised to update to the latest version.

 

Affected Products

 

CVE-2024-9680

  • Firefox versions: ~ 131.0.2 (excluded)
  • Firefox ESR versions: ~ 128.3.1 (excluded)
  • Firefox ESR versions: ~ 115.16.1 (excluded)

 

 

Resolved Vulnerabilities

 

Use-After-Free Vulnerability in Firefox, Firefox ESR (CVE-2024-9680)

 

Vulnerability Patches

 

The following product-specific Vulnerability Patches have been made available in the latest updates. If you are using an affected version, Please follow the instructions on the Referenced Sites to update to the latest Vulnerability Patches version.
 

 

CVE-2024-9680

  • Firefox version: 131.0.2
  • Firefox ESR version: 128.3.1
  • Firefox ESR version: 115.16.1

 

 

References

[1] CVE-2024-9680 Detail

https://nvd.nist.gov/vuln/detail/CVE-2024-9680

[2] firefox/131.0.2

https://www.mozilla.org/en-US/firefox/131.0.2/releasenotes/

[3] firefox/115.16.1

https://www.mozilla.org/en-US/firefox/115.16.1/releasenotes/

[4] firefox/128.3.1

https://www.mozilla.org/en-US/firefox/128.3.1/system-requirements/