Unrated severityNVD Advisory· Published Mar 19, 2024· Updated Feb 13, 2025

CVE-2024-2616

Description

To harden ICU against exploitation, the behavior for out-of-memory conditions was changed to crash instead of attempt to continue. This vulnerability affects Firefox ESR < 115.9 and Thunderbird < 115.9.

Affected products

osv-coords23 versions
pkg:apk/chainguard/firefox-esr pkg:rpm/almalinux/firefox pkg:rpm/almalinux/firefox-x11 pkg:rpm/opensuse/MozillaFirefox&distro=openSUSE%20Leap%2015.5 pkg:rpm/opensuse/MozillaThunderbird&distro=openSUSE%20Leap%2015.5 pkg:rpm/opensuse/MozillaThunderbird&distro=openSUSE%20Tumbleweed pkg:rpm/suse/MozillaFirefox&distro=SUSE%20Enterprise%20Storage%207.1 pkg:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP2-LTSS pkg:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP3-LTSS pkg:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP4-ESPOS pkg:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP4-LTSS pkg:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Desktop%20Applications%2015%20SP5 pkg:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP5 pkg:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP2-LTSS pkg:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP3-LTSS pkg:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP4-LTSS pkg:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP5 pkg:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP2 pkg:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP3 pkg:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP4 pkg:rpm/suse/MozillaFirefox&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP5 pkg:rpm/suse/MozillaThunderbird&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Package%20Hub%2015%20SP5 pkg:rpm/suse/MozillaThunderbird&distro=SUSE%20Linux%20Enterprise%20Workstation%20Extension%2015%20SP5
< 115.9.1-r0+ 22 more
- (no CPE)range: < 115.9.1-r0
- (no CPE)range: < 115.9.1-1.el8_9.alma.1
- (no CPE)range: < 115.9.1-1.el9_3.alma.1
- (no CPE)range: < 115.9.1-150200.152.131.1
- (no CPE)range: < 115.9.0-150200.8.154.1
- (no CPE)range: < 115.9.0-1.1
- (no CPE)range: < 115.9.1-150200.152.131.1
- (no CPE)range: < 115.9.1-150200.152.131.1
- (no CPE)range: < 115.9.1-150200.152.131.1
- (no CPE)range: < 115.9.1-150200.152.131.1
- (no CPE)range: < 115.9.1-150200.152.131.1
- (no CPE)range: < 115.9.1-150200.152.131.1
- (no CPE)range: < 115.9.0-112.203.2
- (no CPE)range: < 115.9.1-150200.152.131.1
- (no CPE)range: < 115.9.1-150200.152.131.1
- (no CPE)range: < 115.9.1-150200.152.131.1
- (no CPE)range: < 115.9.0-112.203.2
- (no CPE)range: < 115.9.1-150200.152.131.1
- (no CPE)range: < 115.9.1-150200.152.131.1
- (no CPE)range: < 115.9.1-150200.152.131.1
- (no CPE)range: < 115.9.0-112.203.2
- (no CPE)range: < 115.9.0-150200.8.154.1
- (no CPE)range: < 115.9.0-150200.8.154.1
Mozilla Corporation/Thunderbirdv5
Range: unspecified
Mozilla Corporation/Firefox Esrcpe-rescue
Range: unspecified

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000